ce71170084992bcb2083e64af6ffb5cb_JaffaCakes118 | Triage

Sharing

General

Target

ce71170084992bcb2083e64af6ffb5cb_JaffaCakes118
Size

273KB
MD5

ce71170084992bcb2083e64af6ffb5cb
SHA1

00954ae691ed4e81b72960dc6588525ed335b10b
SHA256

d2f55341f05ab252c0b32bd3b892f6735a006923e3859c1e11203ad28719437f
SHA512

dd0178c9c84acab51bbe756ae9309f659e6ffa09c822fae9d2ca73f4d79c57d6792bd273e0a3a363abbe9bae0c4ff48c34693f9b61cb210332342732398774e7
SSDEEP

6144:jm6IQAI8rbO13Ar2YqmMvr+27eWOP7j/Y5783KNZP4xYuOw:OMV1RYqmMv2WO+78Ew3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce71170084992bcb2083e64af6ffb5cb_JaffaCakes118

Files

ce71170084992bcb2083e64af6ffb5cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f8b9bd89701b36764e97d2f08325686

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
QueryPerformanceCounter
WideCharToMultiByte
GetModuleHandleA
GetCurrentThreadId
ReadFile
EnumResourceLanguagesA
FindFirstFileA
WriteFile
GetCurrentProcessId
EnumResourceTypesW
GetSystemDirectoryW
IsDBCSLeadByte
GlobalHandle
FindNextFileA
SetFilePointer
VirtualProtect
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesW

oleacc

LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ