2b62ce9df313e3161134f9ae31523f25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b62ce9df313e3161134f9ae31523f25_JaffaCakes118
Size

56KB
MD5

2b62ce9df313e3161134f9ae31523f25
SHA1

a811f9deb4516858aaccfd6c2eec7aa814318361
SHA256

bbc0b03630334eaa5d5653c4ee354d67decfe3eabbbd7af1ff761683ce2204ab
SHA512

2b4e3459a8ec408bd6fdcff7f235dcdcd81168c420cda4e330b7acb9a5e77b09a8ce8fb71e37b9a0e9af9a39b4e6436c094f15d294194b3f19ea9bb5a236a1ea
SSDEEP

1536:PLGZQFH8WGKhfRwHgB2JMRUmycTl1LbCSnSn6s:PyZQ39+6cYUzG1Lbv07

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b62ce9df313e3161134f9ae31523f25_JaffaCakes118

Files

2b62ce9df313e3161134f9ae31523f25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

938dc1e9ad724a2387c7773b97a961a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForDebugEvent
SetVolumeMountPointA
DeleteTimerQueueTimer
lstrcpyA
RemoveLocalAlternateComputerNameA
ExitThread
DisableThreadLibraryCalls
HeapUsage
HeapReAlloc
AddLocalAlternateComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE