JaffaCakes118_6db8c29690fdf3382220bc004955d31c | Triage

Sharing

General

Target

JaffaCakes118_6db8c29690fdf3382220bc004955d31c
Size

166KB
MD5

6db8c29690fdf3382220bc004955d31c
SHA1

778b2f6706ada616f688e3c4650c1419d487a113
SHA256

8101e389c966ad926e94236a078b4486cd4ea3888c1fcc0dbbc2289410d10eb6
SHA512

197b61a2506749a154f640fa30ddc162b13a47db30a8f8302bd9713d1fb27d71e011a3a2f44df3657d34cfc01b3209967047e0c6a055976808cb26a69dfdcecc
SSDEEP

3072:uGViOCChCNwI2yF8HcEaOQLDxP2qaQaVY4jglLsyfdkBNFMOGOwCv++q4Q:uKCChCNwPOBEa1LJiNYrLBdJOGC+zB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6db8c29690fdf3382220bc004955d31c

Files

JaffaCakes118_6db8c29690fdf3382220bc004955d31c
.exe windows:4 windows x86 arch:x86

12cc87e3e35bc10a481bac7d29243541

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameW
GetModuleHandleA
FindNextFileA
FindFirstFileA
WriteFile
GetCurrentProcessId
WideCharToMultiByte
GetCurrentThreadId
EnumResourceTypesA
SetFilePointer
lstrlenA
IsDBCSLeadByte
GetSystemDirectoryW
GlobalHandle
QueryPerformanceCounter
EnumResourceLanguagesW
ReadFile
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesA

oleacc

LresultFromObject
CreateStdAccessibleProxyA

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ