02a4da487d0bcc17dd7899805bb00080_JaffaCakes118 | Triage

Sharing

General

Target

02a4da487d0bcc17dd7899805bb00080_JaffaCakes118
Size

57KB
MD5

02a4da487d0bcc17dd7899805bb00080
SHA1

129e445a8d3bcd3d56b37644600d704990d63fc5
SHA256

881c29b311ecdbcf22d0fb7db04997eff238d0dc52e904e7daf5dc9c0ba69aea
SHA512

58e6ce9b76eb0b50a7d1ef087c83df0e0afb7d8bfcdf003c5e897f5ace8571c73418e6f431d2d66078c1d88d54e1b4b4eca85ac2455db6a82bf6b32419b4aa48
SSDEEP

1536:InaoBp9XW7axfSxPGtQtXzN2gxdOdmTWK/7ay:aDPx60qzIgTOQTWK/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a4da487d0bcc17dd7899805bb00080_JaffaCakes118

Files

02a4da487d0bcc17dd7899805bb00080_JaffaCakes118
.exe windows:4 windows x86 arch:x86

565ce22aca68c31baa95c0a0e85c0bd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
CreateMailslotA
CreateNamedPipeA
GetStdHandle
Sleep
DeleteFileA
lstrcmpiA
IsValidLocale
GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
lstrcmpiA
OpenMutexA
GetDriveTypeW
SetLastError
lstrcmpiA
lstrcmpiA
HeapCreate
GetLogicalDriveStringsA
GetVolumePathNameA
WaitForMultipleObjects
lstrlenA
GetProcessHeap

scecli

SceOpenPolicy
DeltaNotify
InitializeChangeNotify
SceSysPrep

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ