2b9d69b93e5fdfa562bbba06b9396ef3_JaffaCakes118 | Triage

Sharing

General

Target

2b9d69b93e5fdfa562bbba06b9396ef3_JaffaCakes118
Size

96KB
MD5

2b9d69b93e5fdfa562bbba06b9396ef3
SHA1

a743e8b6ce6649cfd6777e9a054a0775aa81810d
SHA256

38f1f5192afada1dca402dba2cfeff84a829cf0319fdf9265b7d2bf99a3df629
SHA512

aaee69124c2e8c493b9cccdddaccdfc57979895dd04cb097d77ed83caa015b00649c153d92d3b098f69dbb977cb4131b7d790363d3a91d0cac71d4fc060f472a
SSDEEP

1536:TwewOVmFrhurN8rZIiOLHYXLJDoPYMfqN0Ukewxzsf1wGCAaBYLxz32UgQ8:TwebVmFrIrN81uL4bJMPYiqNvAY6tA3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b9d69b93e5fdfa562bbba06b9396ef3_JaffaCakes118

Files

2b9d69b93e5fdfa562bbba06b9396ef3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a15e2fe028a6de00c3731c27c84da9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
GetCurrentConsoleFont
SetDefaultCommConfigA
EnumLanguageGroupLocalesA
GetCommandLineA
GlobalUnfix
SetCommBreak
HeapSummary
ProcessIdToSessionId
SetConsoleMenuClose
SetConsoleCtrlHandler
lstrcat
GetCommandLineA
GetStartupInfoA
ExitProcess
SetConsoleKeyShortcuts
NlsGetCacheUpdateCount
CreateSemaphoreA
GetCommModemStatus
QueryInformationJobObject
QueueUserAPC
lstrcpyA
UnlockFileEx
SetTimerQueueTimer
GetSystemDefaultLangID
PeekConsoleInputA

Sections

.xcode
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ