2cca8d16dd958375fd5424ae6f3f5097_JaffaCakes118 | Triage

Sharing

General

Target

2cca8d16dd958375fd5424ae6f3f5097_JaffaCakes118
Size

92KB
MD5

2cca8d16dd958375fd5424ae6f3f5097
SHA1

ff8b1345c9c7e0bd2737aeed22cde5a868f437da
SHA256

6f1eba6449a727c286991601b72b37f1ab57cff0db3c74964085d0762ae12f54
SHA512

333e7e48415671967d87f75bbb511770310e52606eb616df56953b92c39dbcb8e8c4c3372a35497cb0e751b042d0da9bdcf1caed2c2fb5d5a4dd9fbceef93f72
SSDEEP

1536:9Zl52tyuAo6nfnLOLQaPlFUwTdquXQC6AU942zxtZ2w5PPDXMNJzeCM2NHA49G:9ZfSmoIfnLOLBCwTdqPC6AN2zbZ2w5Ph

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cca8d16dd958375fd5424ae6f3f5097_JaffaCakes118

Files

2cca8d16dd958375fd5424ae6f3f5097_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96ba33c1a25cde1fba4065006c25a7ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
CancelIo
AreFileApisANSI
QueryPerformanceCounter
SetConsoleLocalEUDC
EraseTape
EnumSystemLanguageGroupsA
InterlockedCompareExchange
LocalFileTimeToFileTime
GetCommandLineA
GetStartupInfoA
ExitProcess
SetCommState
VDMConsoleOperation
VirtualAlloc
EnumUILanguagesA
GetConsoleNlsMode
GetFileType
GetStringTypeA
WaitForSingleObjectEx
GetProcessWorkingSetSize
DuplicateConsoleHandle
GetOverlappedResult
UnlockFileEx
GetTapePosition
RegisterConsoleIME

Sections

WEIJUNLI
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ