JaffaCakes118_0bf4554992ee0878a8abb67e4677d80c | Triage

Sharing

General

Target

JaffaCakes118_0bf4554992ee0878a8abb67e4677d80c
Size

164KB
MD5

0bf4554992ee0878a8abb67e4677d80c
SHA1

46aefaf1ab4bf380606fb91d52760a3999186c43
SHA256

1e424f2536d03c57ab46b2c3ef5dd0ba885546d8dcafda676b9a73174a9f2763
SHA512

0b2bcd4a61953679f30b19c4e0950c10f85bce93273feadd94e842cb961feb1d7c73ce99644d28109781c7c63e5849de56af89c3f0e9665a0305c3afd1ad795d
SSDEEP

3072:8E6pnXFXE7Nc1ekFPK3GPNltV8AlsaWQPE0taSk5KipEk7YE+ou9BrO:8fn1XEZFsPzXtaAls/qbtQcipEqYdfO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0bf4554992ee0878a8abb67e4677d80c

Files

JaffaCakes118_0bf4554992ee0878a8abb67e4677d80c
.exe windows:4 windows x86 arch:x86

e032d509fac9fde094cc1ffc552a7d20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetAtomNameA
InitializeCriticalSection
Sleep
LockResource
FindFirstFileW
GlobalSize
DeleteCriticalSection
GetProcAddress
lstrlenW
FindClose
GetTickCount
EnumResourceTypesW
GetPrivateProfileStringW
GetPrivateProfileIntW
MulDiv
LoadResource
GetVersionExW
GetVersionExA
MultiByteToWideChar
LoadLibraryW
GetSystemDirectoryW
GetModuleFileNameW
GetModuleHandleW
FreeLibrary
WritePrivateProfileStringW
GetLocaleInfoW

oleacc

LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ