2dd71c22ae27af59c03a21ed71db734c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dd71c22ae27af59c03a21ed71db734c_JaffaCakes118
Size

8KB
MD5

2dd71c22ae27af59c03a21ed71db734c
SHA1

8296ee868b59b17d8beba6d1e70719c13a690def
SHA256

6089ec50927e154f37ff604593f1d1f1a3b464c10ce11e4969654e50bcdb4769
SHA512

a1ed00a68a4f026ac9a0f73694922a12c27f232bd7592efdeab754c0d05ed9f5df04db129be36d0471c24436a6ee25f2f35bac1c9f836f7136cf8a24fdfbf4c9
SSDEEP

192:LrBxQ2ufsNAVSZCWC/PVqiUbBD06up7agUBy3LPp:BLuXWGcjRgpuuLR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd71c22ae27af59c03a21ed71db734c_JaffaCakes118

Files

2dd71c22ae27af59c03a21ed71db734c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a1b48bc7f9a93db0de4471d679405a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
SleepEx
GetTickCount
GetCommandLineA
TlsSetValue
Sleep
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
QueueUserAPC
IsDebuggerPresent
GetVersionExA
TlsAlloc
CloseHandle
GetCurrentProcessId
TlsFree
CreateThread
lstrcpyA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE