a2a6455a4da0192fb8efe85e98fd3dfa_JaffaCakes118 | Triage

Sharing

General

Target

a2a6455a4da0192fb8efe85e98fd3dfa_JaffaCakes118
Size

8KB
MD5

a2a6455a4da0192fb8efe85e98fd3dfa
SHA1

a9a65198cf692a306be1e23c9e965549b7294b26
SHA256

92255343407bf219f094bec01ac7750cf82869741d6fb5c27967624ce0e6bc80
SHA512

2b9a1c7b33e80bdfc213be9d3dfbeb7491ede790045c5aec15ec55bd686c9787d2b19420f8058286c286375db2bee84e55d101c42f99a03a92010691e0b8eeb9
SSDEEP

192:UWBxQHZV31OxBILBTzXQSolgag9O46JRgp:tYlO7ILpzQad90JR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2a6455a4da0192fb8efe85e98fd3dfa_JaffaCakes118

Files

a2a6455a4da0192fb8efe85e98fd3dfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3f661728cb9638174b23dcb9cf98fba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
GetTickCount
GetCommandLineA
Sleep
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
QueueUserAPC
IsDebuggerPresent
GetVersionExA
CloseHandle
GetCurrentProcessId
CreateThread
lstrcpyA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE