2a75de2b9a96430385c384f04e1816f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a75de2b9a96430385c384f04e1816f9_JaffaCakes118
Size

64KB
MD5

2a75de2b9a96430385c384f04e1816f9
SHA1

903ea2cd91bd34487dd020f854467dcac99e3fef
SHA256

659493731739350ca50d8ad05e9cef0c9379e22fdeb484e62348e68db63a874d
SHA512

a9a768d14e3043704d04f54359f15eb6c7b7f83e4f624132a0a40b0c57341f32e131ee15bb89428017c449fc675dc7f3ccbd09072221baf9ea10058bdea67ca6
SSDEEP

192:wPOS20mv8KRdZMFu2tx+8dE3UzSYUrGuuvVKRdZMFu2tx+8dE3UzSYU/:wPO50r1xq3UZU9a1xq3UZU/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a75de2b9a96430385c384f04e1816f9_JaffaCakes118

Files

2a75de2b9a96430385c384f04e1816f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5034146808fabf9c0f0b9080bdf1395f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Download\test123\3434\Release\3434.pdb

Imports

kernel32

FreeEnvironmentStringsA
GetModuleHandleA
_lclose
_lread
_lopen
GlobalAlloc
GetSystemTime
GetModuleFileNameA
Sleep
GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 621B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ