2acd73ed9844ff9b520bf7f89f6fa7de_JaffaCakes118 | Triage

Sharing

General

Target

2acd73ed9844ff9b520bf7f89f6fa7de_JaffaCakes118
Size

21KB
MD5

2acd73ed9844ff9b520bf7f89f6fa7de
SHA1

2fa6c820b1fe9b9b4e665fdc6b47763fff13f97d
SHA256

a7811e623729b39a23b0cf3ac33f7dae2ad427733675cad042b977d27af92b22
SHA512

b8658d178ecf16f4880303197cb9379ec6b382269a496afea9a390a789dff8d6ae1f9e6c0afc1e22355cf2db6c02fe4c4190d4c6f301e856bb5fd761b6554b8b
SSDEEP

384:1brylwD/gdtWPiA3djfJg34fcP8kkPliRDTfOnmnmFtOdMhGKbJz:1bSwrgdyztLJLf9NITfOmsGEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2acd73ed9844ff9b520bf7f89f6fa7de_JaffaCakes118

Files

2acd73ed9844ff9b520bf7f89f6fa7de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab58d0df9f3fd091b5d44769f93ba787

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
ExitProcess
CloseHandle
GetSystemDefaultLangID
GetVersion
GetOEMCP
SetConsoleCP
GetModuleHandleA
VirtualProtect
HeapAlloc
GetStartupInfoA
Sleep
LockResource
GetACP
HeapDestroy
DeleteCriticalSection
lstrlenW
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentProcessId
OutputDebugStringW
GetDateFormatA
GetProcessHeap
FindFirstFileA
CreateEventW
SetStdHandle

advapi32

OpenServiceW

ole32

OleInitialize
CoTaskMemAlloc

msvcrt

_XcptFilter

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE