JaffaCakes118_0d4efbd79a37623d6369dee3c5b064a3 | Triage

Sharing

General

Target

JaffaCakes118_0d4efbd79a37623d6369dee3c5b064a3
Size

164KB
MD5

0d4efbd79a37623d6369dee3c5b064a3
SHA1

2407501e662580dfe1060e66598439e33835a089
SHA256

213dd5b67ceac216ab5b5f66ef9b3e57880139dd8d3f84aaac942e27cde21799
SHA512

c8b94bc4cdcba5249f4b4f2f4ee2a051d9d394d840a1a94e820319bd7bd1187f1ca1f4d537ee204b4348d5102747c6f59fafc8301648b63f0697f041b8e81bf0
SSDEEP

3072:LTXmsHhK9s7K5KlAPm/6toqdamFpQHF/Ji6phss0jBNX4hkSDe+617PZKDF8h:OsHcq72KWWQamFMriy0jBAe7PZyF8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0d4efbd79a37623d6369dee3c5b064a3

Files

JaffaCakes118_0d4efbd79a37623d6369dee3c5b064a3
.exe windows:4 windows x86 arch:x86

b6b9b7fe90fa50568bb322071ab41df7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GlobalGetAtomNameW
lstrlenA
WriteFile
EnumResourceLanguagesW
FindNextFileA
FindFirstFileA
GetCurrentProcessId
GetCurrentThreadId
EnumResourceTypesA
QueryPerformanceCounter
GlobalHandle
ReadFile
GetSystemDirectoryW
GetModuleHandleA
IsDBCSLeadByte
SetFilePointer
FindClose

oleacc

LresultFromObject
CreateStdAccessibleProxyW

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ