JaffaCakes118_83a615fd033740f5491154fbca566cf2 | Triage

Sharing

General

Target

JaffaCakes118_83a615fd033740f5491154fbca566cf2
Size

180KB
MD5

83a615fd033740f5491154fbca566cf2
SHA1

9a50294719691217c91bd854ec3e5f4f56e91912
SHA256

12e9250f686cc15de6e208a336945d858d22fef52fe85da2f073e83bedaed67b
SHA512

e00271528a6b88f1f5acf58560644e8be429040fff3b02b097e78340b33d5096b6133de583dbe251093455c9e138537ef5bac4c815d574c58ff53e6784918877
SSDEEP

3072:xrNyT5rEnfRYAL48LFs7cLAv7Ru5mRqBrTeaziES39/BOHfiyjzbiEGM7XfPK2sC:xpyF+L9Wv7TRqBoEoZBOHaIbQKKXDJpZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_83a615fd033740f5491154fbca566cf2

Files

JaffaCakes118_83a615fd033740f5491154fbca566cf2
.exe windows:4 windows x86 arch:x86

15a76b462a513e4b49639bad50de2db8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GlobalGetAtomNameA
WideCharToMultiByte
GetModuleHandleA
WriteFile
FindFirstFileA
SetFilePointer
VirtualProtect
EnumResourceLanguagesA
EnumResourceTypesW
GetCurrentProcessId
GetCurrentThreadId
IsDBCSLeadByte
GetSystemDirectoryW
QueryPerformanceCounter
GlobalHandle
FindNextFileA
FindClose

oleacc

LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ