JaffaCakes118_009c452b62520665c001047aa34c3897 | Triage

Sharing

General

Target

JaffaCakes118_009c452b62520665c001047aa34c3897
Size

164KB
MD5

009c452b62520665c001047aa34c3897
SHA1

26beae630f3d1a9aa1d44b5cf280b2772feb8ace
SHA256

47623cf21c5adf919f61fbfdcab363e098da94cf43790d706101998f0031861e
SHA512

23002d1cfbfaa29b8730e150cc0afcefd3fff1c4dffa4ceacdde7b89c7c7b07a95e979a5eef79e86b6f0fe35d4708ef4af58d1daa09d5ef4845279fcd8a46e46
SSDEEP

3072:XRcND5tuvE1EjRtPE/zl3hBjCgFB3C7Q8YeBStM6nRwrKCbCe:yk+Ety/x3vCgFIjfwS6nyqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_009c452b62520665c001047aa34c3897

Files

JaffaCakes118_009c452b62520665c001047aa34c3897
.exe windows:4 windows x86 arch:x86

687d3ada6695045b2ed8db3633cc6249

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameW
WriteFile
GetCurrentThreadId
IsDBCSLeadByte
lstrlenA
FindNextFileA
QueryPerformanceCounter
EnumResourceLanguagesW
ReadFile
EnumResourceTypesA
SetFilePointer
GetCurrentProcessId
GetSystemDirectoryW
FindFirstFileA
GlobalHandle
GetModuleHandleA
WideCharToMultiByte
FindClose

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ