2a3e9cc2ca5038c8b777103c387aa18b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a3e9cc2ca5038c8b777103c387aa18b_JaffaCakes118
Size

92KB
MD5

2a3e9cc2ca5038c8b777103c387aa18b
SHA1

5dc237238bbba8678d85d6eb36076dab083676ff
SHA256

65106999431a8ce3afe540d356d2d43e6a0c560e0df698697d43da0e1a7e93aa
SHA512

d1ec54c46b4140e42e19f12eb0edb4e043f2efff0605e3fb54bdf091e6b79d542eac0b2b515dfd03ea4ae421d298924dc943c29af1bcfcc43504943d58bff1db
SSDEEP

1536:A+w1xoy3mjtsExLn4ZlWs0nlO2g0COgyUsyzVIxNTUkOJOpdlRIJcHN6E2boenph:AV1Z3maExT2lj2g0C2yh0UTOJRI6HN9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3e9cc2ca5038c8b777103c387aa18b_JaffaCakes118

Files

2a3e9cc2ca5038c8b777103c387aa18b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1299e2f6bb1e444ed797792c79196736

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
SetHandleInformation
FatalAppExitA
GetLogicalDrives
ChangeTimerQueueTimer
CreateTapePartition
LocalShrink
ConnectNamedPipe
GetCommandLineA
GetStartupInfoA
ExitProcess
CreateTimerQueue
GetThreadTimes
SetCommState
FindFirstFileExA
NlsConvertIntegerToString
GlobalCompact
GetNumberOfConsoleInputEvents
SetHandleInformation
ConnectNamedPipe
AllocateUserPhysicalPages
GetConsoleTitleA
GetShortPathNameA
IsBadCodePtr
lstrcmp
GetNamedPipeHandleStateA
GlobalMemoryStatus
GlobalLock

Sections

WEIJUNLI
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ