2a90e17e2b4eb67092cdd99808d35ff9_JaffaCakes118 | Triage

Sharing

General

Target

2a90e17e2b4eb67092cdd99808d35ff9_JaffaCakes118
Size

547KB
MD5

2a90e17e2b4eb67092cdd99808d35ff9
SHA1

9588ea273f0dd6e256fc5a45127432b84fce0d99
SHA256

099282790adcee34e599944f72c735673a0883606cd95b838cd9172e959485d2
SHA512

9e34417010b87d3ccb1e43f2ef7a5a865bd9ece3578de560230e34fa4a3e7ebd086dfe6e645be4585fddf41c02446a2de5760793453592654c1752f4f3b83f06
SSDEEP

12288:LbnbWHX6yjIVVxAzgjhKLvX9lIWUFADMgujOMg/bzdAA:LTqHX6VxAzgQvsTFrg/v9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a90e17e2b4eb67092cdd99808d35ff9_JaffaCakes118

Files

2a90e17e2b4eb67092cdd99808d35ff9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be5c86779ba6ec9cd832c431f2018bd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CreateFileA
BuildCommDCBA
VirtualProtectEx
ExitProcess

shell32

StrChrA

user32

ShowCaret
GetCaretBlinkTime

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 760KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 513KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tcode
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ