2da583257a7cb2bd384bd16f339eccf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2da583257a7cb2bd384bd16f339eccf4_JaffaCakes118
Size

34KB
MD5

2da583257a7cb2bd384bd16f339eccf4
SHA1

e3a026f92469a3e3e62c37845ac74a3a7593dbfe
SHA256

fede7302d5f59553d99adfb29b6f2ad46023d3b40475077fbf323a774c14822c
SHA512

9b21333ba53a6d006ecf0e6fb8d8ed0bb4c22474f9cf8773c0b6f3304123e2db57c89ec793a76ed6878e250fb9c45986a5c916df89777547a5334a6ab5e4c5eb
SSDEEP

768:cflivXrVKpVhKvtxwYHwVFoeAQsmucwUsP:ylqrVKprVuQstP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2da583257a7cb2bd384bd16f339eccf4_JaffaCakes118

Files

2da583257a7cb2bd384bd16f339eccf4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe9b94dd0e4ea2a905fbd4f42f4b2f8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
GetLastError
GetLocaleInfoA
GetStartupInfoA
ExitProcess
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ