2b77834333bc7b01fdfffe8ac88d64c5_JaffaCakes118 | Triage

Sharing

General

Target

2b77834333bc7b01fdfffe8ac88d64c5_JaffaCakes118
Size

92KB
MD5

2b77834333bc7b01fdfffe8ac88d64c5
SHA1

0c4ea64a3132bab70961b67a7c8c1eeadaa23019
SHA256

5f160d7175f78ed2bf057a4544876aea77847ea1fff0abda93db1be9c08e168d
SHA512

7d6e2cca15915a7f9eaac08136c083e820254f351b639ae2ab991e4818fd30018a58e2ef39b79377ec0a03d85e6a39a85f6ffd1b56310a489fb3034d6715900e
SSDEEP

1536:kzKh/dt2CCpy2f3i/A5tDZ2urMODzGOjRC8eF4YjFqBBX4xRBELm7dAS:kuftop16stIurMViRCZeYRMBIB6Qd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b77834333bc7b01fdfffe8ac88d64c5_JaffaCakes118

Files

2b77834333bc7b01fdfffe8ac88d64c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c93b3c9dca3e544976a7f15bd50c602

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
VerifyConsoleIoHandle
CompareStringA
ReadFileEx
lstrcmpi
GetExitCodeProcess
GetUserDefaultLCID
WriteConsoleOutputA
GetConsoleInputWaitHandle
InitializeCriticalSection
SetConsoleTextAttribute
MulDiv
DeleteTimerQueue
GetCurrentThread
SearchPathA
BuildCommDCBAndTimeoutsA
TermsrvAppInstallMode
WriteFileGather
GetCommandLineA
GetStartupInfoA
ExitProcess
GlobalDeleteAtom
GlobalWire
CreateDirectoryExA
SetSystemPowerState
GetCurrentProcess
GetSystemPowerStatus
AllocateUserPhysicalPages
ResumeThread

Sections

WEIJUNLI
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ