bdc16ed909eb4f8d63b775dedd04a137_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc16ed909eb4f8d63b775dedd04a137_JaffaCakes118
Size

179KB
MD5

bdc16ed909eb4f8d63b775dedd04a137
SHA1

a9842685d03fa07aa7be1db844b7327646cd3cbe
SHA256

919e80829c0921cdc7dbc26fa5bf89638949ad529c6d5875647d2898b738a371
SHA512

716418e88b5c0965999a1fd98601998ce1633fbf8fe0fcf3568b0db102340bab49fbe4d38d387ae987046809e9d2ff05e0e7ebfd52a16cf4432d4e15902c79b7
SSDEEP

3072:w8qznNZrBKeu/RFWQTZc1+sJevEFeul7V0i3DESdYauBKWgfFB4DyOmv4X4pUrP5:w5znzXu/XWQTZctUcFeul7Vb3DESdZuV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc16ed909eb4f8d63b775dedd04a137_JaffaCakes118

Files

bdc16ed909eb4f8d63b775dedd04a137_JaffaCakes118
.exe windows:4 windows x86 arch:x86

440480942f25cce6f1445ffb621f54ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
GlobalGetAtomNameW
WriteFile
GlobalHandle
SetFilePointer
IsDBCSLeadByte
WideCharToMultiByte
EnumResourceLanguagesW
ReadFile
QueryPerformanceCounter
EnumResourceTypesA
GetSystemDirectoryW
FindFirstFileA
lstrlenA
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesA

oleacc

LresultFromObject
CreateStdAccessibleProxyW

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ