2bddf15b7995b4d82a13821d35e8d2eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bddf15b7995b4d82a13821d35e8d2eb_JaffaCakes118
Size

35KB
MD5

2bddf15b7995b4d82a13821d35e8d2eb
SHA1

2afa11154bb1de579fef52f8e171cee2fbd85259
SHA256

862d718f3e8f8e7b3cb95bee9b0b90b135a5e09b5eb5e9401423eebb80ba4047
SHA512

365819b0a1b6f65ec8e69eb29ddf1fbbd977ccec533fd6890f016aa2fc29e2962f45eb1f7a1b8af74b056a0bf408a259f16fd6d8e8c8ea093ce0d50277487e44
SSDEEP

384:Vg0GvlsVYkWkJ7Wq60Z2y6aN5d5YmM0sTsQe6cQQBTYChB1aoIUIp2X/t0oLaGu6:a5WYwc0Z2y6EL6Ll691pIXgX6iUHk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bddf15b7995b4d82a13821d35e8d2eb_JaffaCakes118

Files

2bddf15b7995b4d82a13821d35e8d2eb_JaffaCakes118
.exe windows:6 windows x86 arch:x86

d9e9733c9e3bca17da8124ddf2ba24a7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dinotify.pdb

Imports

kernel32

lstrcmpW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

_controlfp
_except_handler4_common
__wgetmainargs
_cexit
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit

pnpui

SimplifiedDINotificationW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE