d26c520df00a7bde96324847f65e7148_JaffaCakes118 | Triage

Sharing

General

Target

d26c520df00a7bde96324847f65e7148_JaffaCakes118
Size

165KB
MD5

d26c520df00a7bde96324847f65e7148
SHA1

69d20c71a5b08d27a361810ce452071006558537
SHA256

f55edd6c46a23022374c0bcbf678be55beeb7fcd86ee89ba642600a56ffefd1c
SHA512

f5bc5df0a10435f064bfeac5e908e53f4133d9cdc96f6a468bc3b895af559c602790dbafbb385f1491c15a993ae6756fb65b5a730cebf0d987661e1818839265
SSDEEP

3072:Yk4HjukBgBp4tM6ZCehbRFqgLnXNQdZN3mKFAvwBrgt+DyQLOP8dcwdR:YVnBgnwQehbRFt4ZNBAQEt+DyQX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d26c520df00a7bde96324847f65e7148_JaffaCakes118

Files

d26c520df00a7bde96324847f65e7148_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2da9bc06bebb710f3af08384987800a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GlobalGetAtomNameW
QueryPerformanceCounter
GlobalHandle
IsDBCSLeadByte
GetCurrentThreadId
SetFilePointer
FindFirstFileA
FindNextFileA
EnumResourceLanguagesW
EnumResourceTypesA
GetSystemDirectoryW
ReadFile
WriteFile
WideCharToMultiByte
GetCurrentProcessId
lstrlenA
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesA

oleacc

LresultFromObject
CreateStdAccessibleProxyW

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ