JaffaCakes118_50ee0bf1023565c5645875428f7a416e | Triage

Sharing

General

Target

JaffaCakes118_50ee0bf1023565c5645875428f7a416e
Size

165KB
MD5

50ee0bf1023565c5645875428f7a416e
SHA1

f2fd5f74fd011a68a963d0fd453ea6e5aedb0ccf
SHA256

9a559c7eb39e5f8e2954473b6c9ae6ca7665a714b3b6eb240083eef1aee7ad5e
SHA512

b67678d37a0cdf6333cb2a4d3ebaafda152c4e5b6a4c8c820563adf87325158561bc4dd4375da4c38ea66a9cf91eec3020f6f22b06ad23af96d3cb780f43a111
SSDEEP

3072:ATiZ7ZFygdbwASG0HDifbznSu2GuaVdd+m2r/0pTyqbcIY:+E7vdbjSXHOPnSu2GuaVdT+4TyqI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_50ee0bf1023565c5645875428f7a416e

Files

JaffaCakes118_50ee0bf1023565c5645875428f7a416e
.exe windows:4 windows x86 arch:x86

1187ffa0e90c606eaad72dc80908fd39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
GetModuleHandleA
IsDBCSLeadByte
FindNextFileA
VirtualProtect
GlobalHandle
WriteFile
WideCharToMultiByte
GetCurrentProcessId
ReadFile
EnumResourceTypesW
GetCurrentThreadId
GetSystemDirectoryW
EnumResourceLanguagesA
FindFirstFileA
SetFilePointer
QueryPerformanceCounter
FindClose

oleacc

LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ