2678da801e6b1a7275daa9af619b3a0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2678da801e6b1a7275daa9af619b3a0a_JaffaCakes118
Size

92KB
MD5

2678da801e6b1a7275daa9af619b3a0a
SHA1

484c3d7c61eb69cb465ca322fa9fa1bb9135b61e
SHA256

bef34d03e238848a6017b06ebf8e9de2db7f27b1a0203a2aa57639e71dd09dce
SHA512

7e95a81e87a4dd00d20ae9f60c330129b86f3a990a7933f0ec64d0f8ffe716c50e626bf47784fd64203410d59a6e364d6ca9faccaca5921828996b0f50c981ca
SSDEEP

1536:owpOw8S4C+MLhEEPuvWXWwO3GjlZGcER+EMjX7mTBwYV9AwSMWYQNsgTzBtG:owpX8S4C+MNFP+Wm33hiN7IPhWhTV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2678da801e6b1a7275daa9af619b3a0a_JaffaCakes118

Files

2678da801e6b1a7275daa9af619b3a0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07a7568973c7aeffde1133200227853a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetConsoleInputWaitHandle
DelayLoadFailureHook
VirtualFree
SetInformationJobObject
LocalCompact
VDMConsoleOperation
GetStartupInfoA
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ