df1a357c7f9ea6397b1efe879400daf6_JaffaCakes118 | Triage

Sharing

General

Target

df1a357c7f9ea6397b1efe879400daf6_JaffaCakes118
Size

275KB
MD5

df1a357c7f9ea6397b1efe879400daf6
SHA1

6c4dcceb3188ccad0941bf61ad3c1cdfbf979c57
SHA256

3ca51f7d7904c175addd3144548b1eeec52ff00058d7d0539853935427b310c5
SHA512

6964bfdf6ffe88f85f7fd4bef051cb2041a462f1c72bdee3b015bff7c1c049cce3a7c1431efdabacebee8eb60f3011164284664bdf066a5c036ea1cffed353f8
SSDEEP

6144:KdtrFPaLLGFKSRhaYb6Y4MblGYoH4XdJ6ZBcLQe2S:KdtpCLZ0haYb6CE4tA6Qe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df1a357c7f9ea6397b1efe879400daf6_JaffaCakes118

Files

df1a357c7f9ea6397b1efe879400daf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43f410103ab04b280831dd51fa5c9694

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
EnumResourceLanguagesA
GlobalGetAtomNameA
GetCurrentThreadId
WriteFile
ReadFile
FindNextFileA
GlobalHandle
FindFirstFileA
GetCurrentProcessId
EnumResourceTypesW
GetSystemDirectoryW
SetFilePointer
QueryPerformanceCounter
VirtualProtect
WideCharToMultiByte
IsDBCSLeadByte
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesW

oleacc

LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ