c90cab227a00f0bcb8900b5f069c5c19_JaffaCakes118 | Triage

Sharing

General

Target

c90cab227a00f0bcb8900b5f069c5c19_JaffaCakes118
Size

8KB
MD5

c90cab227a00f0bcb8900b5f069c5c19
SHA1

a81b55d7cc8dd10ae9a018133ab165e4b436d566
SHA256

366b1f229560ebfbd4e0a64c9488a7aa3f87e7d57dc29999188e431f000deb8f
SHA512

dc1faf95e4a0c3e1516cb0cdd2adc70f2b346e1c5bdfa9f680b0f65d3a283efe7e3993576024baae875f1c39676a13d6aa5fd3dcd61c5584d4526ccdc6048d3e
SSDEEP

192:GrBxQJfqf8eXgxPE2EIQs41GUbXpPKg4uV2:KuofXgiXIQzIcPK+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c90cab227a00f0bcb8900b5f069c5c19_JaffaCakes118

Files

c90cab227a00f0bcb8900b5f069c5c19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a1b48bc7f9a93db0de4471d679405a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
SleepEx
GetTickCount
GetCommandLineA
TlsSetValue
Sleep
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
QueueUserAPC
IsDebuggerPresent
GetVersionExA
TlsAlloc
CloseHandle
GetCurrentProcessId
TlsFree
CreateThread
lstrcpyA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE