071d4515290b7ca375f7e9a6f4fdced0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

071d4515290b7ca375f7e9a6f4fdced0_JaffaCakes118
Size

180KB
MD5

071d4515290b7ca375f7e9a6f4fdced0
SHA1

f22168771f349c451917e3699e8eaa0a369a4210
SHA256

0376ff7e4fd63bfbfd5537bf88632b0a73c5a6da8948ae9a574a55284429f71d
SHA512

00f33d49c3038ce976b59f585938a20aaa625bdcf5ac6d75c7712ee2a29bca653f644cee8db483e3848c85aee8ebf838f74339b4ece20a4cb88d6215da8db2c9
SSDEEP

3072:6Vvyg36zdTVOp8QNTIOAdn8pFXCERpD0jOomKrs7FjOHLv2bU+fYLIL:m36mp88qnapLD6mLqD2bU8L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
071d4515290b7ca375f7e9a6f4fdced0_JaffaCakes118

Files

071d4515290b7ca375f7e9a6f4fdced0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41e5fc91808ac3ef00b40f86239aaab1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseFlushAppcompatCache
SetEndOfFile
SetLastError
VirtualFree
HeapDestroy
HeapCreate
TlsFree
GetACP
GetSystemTimeAsFileTime
GetSystemInfo
EnumResourceTypesA
CreateMailslotW
InterlockedExchange
VirtualAlloc
VirtualQuery
IsBadWritePtr
TlsAlloc
GetLocaleInfoA

newdev

UpdateDriverForPlugAndPlayDevicesA

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ