2bf23c3c3db89ae087947c8575144fe7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bf23c3c3db89ae087947c8575144fe7_JaffaCakes118
Size

169KB
MD5

2bf23c3c3db89ae087947c8575144fe7
SHA1

a57828ed922b3955c43b353db2dd80e303a20619
SHA256

962a470587bad3a48530926e9a36d4227f9e34e611b91c99504509792e6fd5c2
SHA512

32b1741496462f0a8b33c42b14ba6271b66c34b9f81ad88d78129a532dee93d4319cf6013664310b820efb1e54109c963e0747ce25b4e3234b4190dde8c864a5
SSDEEP

3072:wLMSgivNU8QF+o7mZrTQcurmOLm5VZOg2k/1Bdb+kr+MKnb:gM137mTQ3Lm592kskrLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf23c3c3db89ae087947c8575144fe7_JaffaCakes118

Files

2bf23c3c3db89ae087947c8575144fe7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2219de8a9050105a0bf0dacd26168f2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ReplaceFileW
InterlockedCompareExchange
IsDebuggerPresent
GetStartupInfoW
GetProcessId
SetUnhandledExceptionFilter
QueryPerformanceCounter
EnumResourceTypesA
GetCurrentThreadId
GetCurrentProcessId
UnhandledExceptionFilter
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
Sleep
InterlockedExchange
GetCurrentProcess

clusapi

CloseCluster

comctl32

InitCommonControlsEx

user32

EnumDisplaySettingsW

shell32

ShellExecuteW

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ