2c2caea5462241407027e922ccebf9dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c2caea5462241407027e922ccebf9dc_JaffaCakes118
Size

115KB
MD5

2c2caea5462241407027e922ccebf9dc
SHA1

d4d3ae54d07674197fa69a3c12b15a5e30f2ebff
SHA256

afc0e6784350d1652bb2c254703f1c1cf42a5c0a43f0de06fe33f63915094036
SHA512

5dca88663731b5efa6d3d8419c31bfdf9bbd81afdf8e32a7eacf3dc9bdcb2782e1b5ea7962ee9a4979fb668af692412b2d7df4f55a7a567cacaf3f0f1d6c63b0
SSDEEP

3072:jxtusMOr2+cnehb8vlGEJGEbKNadJ4ShAQK3:9OV+cnemvJG0iyK3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c2caea5462241407027e922ccebf9dc_JaffaCakes118

Files

2c2caea5462241407027e922ccebf9dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

08fed066fc6fd9cdd35e73f3679046eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsW
UTUnRegister
SetMessageWaitingIndicator
GetFileAttributesExW
WritePrivateProfileSectionA
WriteConsoleInputVDMW
CancelTimerQueueTimer
lstrcat
WriteFileGather
MoveFileA
GetDiskFreeSpaceA
SetVolumeMountPointA
RequestWakeupLatency
OpenFileMappingA
GetConsoleAliasesLengthW
ChangeTimerQueueTimer
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE