JaffaCakes118_02b4dfb024e961e4a4c2d42d961e501f | Triage

Sharing

General

Target

JaffaCakes118_02b4dfb024e961e4a4c2d42d961e501f
Size

180KB
MD5

02b4dfb024e961e4a4c2d42d961e501f
SHA1

d025ec474b16dcda1fd662096d04f5e22df7f21b
SHA256

1c42278ff4e4f0c35e3f48dc156f675f8a7f72f070d0ec4127a44fe6c7403ecc
SHA512

3f1529832929540f89afcacb7f1a78d06f5d9b9f5c2a8969a6b9923e3b806b74f6e3df0b41b35a75c0bff55cf33e221ebcbb7e2de5059f622451f14180ac6fe1
SSDEEP

3072:Su8wT71PDF6T29K9yyecj/s998YhepABvcFYMJKU28N///Hubod3pgp4CzzBop2a:y4rF6T2U7eRDY6RYY0Kv8VHHsoh+mCgB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_02b4dfb024e961e4a4c2d42d961e501f

Files

JaffaCakes118_02b4dfb024e961e4a4c2d42d961e501f
.exe windows:4 windows x86 arch:x86

7ea7822558c827ed906c0abf772b7329

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameW
FindFirstFileA
EnumResourceLanguagesW
WideCharToMultiByte
GetCurrentProcessId
ReadFile
IsDBCSLeadByte
GetCurrentThreadId
QueryPerformanceCounter
EnumResourceTypesA
WriteFile
FindNextFileA
SetFilePointer
GetSystemDirectoryW
GetModuleHandleA
lstrlenA
GlobalHandle
FindClose

oleacc

LresultFromObject
CreateStdAccessibleProxyA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ