02a2529420aa3e2f2be9966c58be383f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02a2529420aa3e2f2be9966c58be383f_JaffaCakes118
Size

119KB
MD5

02a2529420aa3e2f2be9966c58be383f
SHA1

85e7932886e10985a0b5b81ab41cea96a557a6f2
SHA256

dbbe9cd64e6c0bae0b3f2ea9b28f10d21d1471e8f2c55072795d4218bfeb1c56
SHA512

b214c05d5fcddcf2d7dba4754231365d40710bef22510c28b51a84a74fb8b86ec1d289bfa613fea76fa92020f8f20f0c27c9927e37eeed43067ea62eb1f290ad
SSDEEP

3072:7+FEwdANHA5EO3nzOP13s3LvYOXOVU57WfVyBQ5Uo:7UNdANm53nqP1BqL572w61

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a2529420aa3e2f2be9966c58be383f_JaffaCakes118

Files

02a2529420aa3e2f2be9966c58be383f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15a6662ac1308cad1908a842badf9673

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileSectionW
GetThreadPriorityBoost
GetConsoleHardwareState
DisconnectNamedPipe
BuildCommDCBAndTimeoutsW
LZDone
WaitForMultipleObjectsEx
WaitNamedPipeW
ChangeTimerQueueTimer
GetFileType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE