JaffaCakes118_6b51b162c5463169fe6f5561f5dbd85b | Triage

Sharing

General

Target

JaffaCakes118_6b51b162c5463169fe6f5561f5dbd85b
Size

274KB
MD5

6b51b162c5463169fe6f5561f5dbd85b
SHA1

36582de1b860f272900af787fb29bb7ba403e009
SHA256

f45fca32e603313047f90ddda2423e88ff94f00123771b82c4efe8fd673d240c
SHA512

55358d24d789d95c59348a50702688c5b8b89f87f38324c7c4160a4c0565eee73c2f9e1edbadde35a17ace58c7ef62659260481b75fea4c22ec8c8488a47e50e
SSDEEP

6144:NwQldz0fnsfqg2Xqfn4X1d8DqFqD6T0vI4Eod/oyQUh308qUDYGqgU6hCR9wjXSw:lpMZg26f4X12iqDPdRQyr0mDtU6sROXl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6b51b162c5463169fe6f5561f5dbd85b

Files

JaffaCakes118_6b51b162c5463169fe6f5561f5dbd85b
.exe windows:4 windows x86 arch:x86

3955671b02d60a41e3163bdde52de1fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
GlobalGetAtomNameW
FindNextFileA
EnumResourceLanguagesW
GetModuleHandleA
SetFilePointer
FindFirstFileA
ReadFile
GetCurrentThreadId
EnumResourceTypesA
WideCharToMultiByte
WriteFile
GetSystemDirectoryW
lstrlenA
QueryPerformanceCounter
GetCurrentProcessId
GlobalHandle
FindClose

oleacc

LresultFromObject
CreateStdAccessibleProxyW

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ