JaffaCakes118_9a6930d94dc7f7a4309ecfb3340842f4 | Triage

Sharing

General

Target

JaffaCakes118_9a6930d94dc7f7a4309ecfb3340842f4
Size

180KB
MD5

9a6930d94dc7f7a4309ecfb3340842f4
SHA1

5ab4c805c3cbbe78c318b9516ef68cffa3f42ff0
SHA256

2b1b91cc1fabf27645d72727fce92f0db418a5b89209f943c17f842be8c8654f
SHA512

180905b3795ff8c23c1cb10a003c3386b5774344e5180609c89bfb3a42b189ec0b74e53b4120b5db1596a2e4a4ffb10279575832214cd9420ac2f1629851b176
SSDEEP

3072:0PJ/TXmhw8wpKxflTmOeLyQ+jHQ4Ll1nGflMSqojkUG1M2jC8tkYHnScMK27nj53:0x/7mhwxpKx9TXEdMSqoja1JCinJ0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_9a6930d94dc7f7a4309ecfb3340842f4

Files

JaffaCakes118_9a6930d94dc7f7a4309ecfb3340842f4
.exe windows:4 windows x86 arch:x86

fe56259e654ba6478f3175021e703f8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
IsDBCSLeadByte
GlobalGetAtomNameA
EnumResourceLanguagesA
GetCurrentProcessId
VirtualProtect
ReadFile
GlobalHandle
EnumResourceTypesW
SetFilePointer
WideCharToMultiByte
GetSystemDirectoryW
FindFirstFileA
FindNextFileA
GetModuleHandleA
WriteFile
QueryPerformanceCounter
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesW

oleacc

LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ