2d190d3795d260afbd07dfe9b2eb1a2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d190d3795d260afbd07dfe9b2eb1a2b_JaffaCakes118
Size

115KB
MD5

2d190d3795d260afbd07dfe9b2eb1a2b
SHA1

27108316af315907476e662ba2e90aff0552e406
SHA256

898ad98eb2218e9e9d0a78d599916668dc85aa58a3dce379e99fa11728362a83
SHA512

ef812d069b31e96a9624c1dd5dd1b8ceb54e8ef7534fe44d4eb661b9dc4ca60150b97b882c308db920e59bac48086e546ac874f0b01024e3c2d9b7c095ac9c30
SSDEEP

3072:HuRRWnLWPPznBJwgcSkZT9I9hMtqghLgwl7Bx8TXXz6fAkqSVDGnci4S3:1WHzBJtGgMthLh7kTbkvI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d190d3795d260afbd07dfe9b2eb1a2b_JaffaCakes118

Files

2d190d3795d260afbd07dfe9b2eb1a2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

064afe1f3940718332de2a95145a7322

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
CreateNamedPipeW
GetDefaultCommConfigW
EnumTimeFormatsA
GetTempFileNameA
_lcreat
FillConsoleOutputAttribute
CreateJobObjectW
GetFileAttributesA
Process32FirstW
ReadConsoleW
FileTimeToDosDateTime
LocalSize
GetLocaleInfoW
SetThreadExecutionState
GetBinaryTypeA
EnumSystemCodePagesW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE