2b6f3b33de6d49411bc5f07e5945ba26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b6f3b33de6d49411bc5f07e5945ba26_JaffaCakes118
Size

59KB
MD5

2b6f3b33de6d49411bc5f07e5945ba26
SHA1

1d1d8aa8fa5a0fcecef531b6f89d4c8185a53f6c
SHA256

2e0fdd331fe6e90b1159df6f07b0978ef268886daf76d58ce876e3b99040556d
SHA512

8e2eef7f54aba0288244e5ef9b9f85ce1d0ee873b039a7d6790399a8914432832f7d6d184e02b8409bc3d3650f963d44dd7465bc03689a5eebb49e20f8d739c9
SSDEEP

1536:FHV5VeMqLBVhSqMDJboM+4CUpj62rj0l:F3Ve9FSqtM8Qj6wj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6f3b33de6d49411bc5f07e5945ba26_JaffaCakes118

Files

2b6f3b33de6d49411bc5f07e5945ba26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6845bd4022ec69a5322c439bb8e8fc26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
lstrcmpiA
Sleep
GetLogicalDriveStringsA
FileTimeToLocalFileTime
GetVolumePathNameA
CreateMailslotA
GetModuleHandleA
lstrcmpiA
lstrcmpiA
GetDriveTypeW
HeapCreate
SetLastError
lstrcmpiA
CreateNamedPipeA
WaitForSingleObject
lstrcmpiA
GetModuleFileNameA
IsValidLocale
lstrlenA
GetStdHandle
GetProcessHeap
SuspendThread

riched20

RichEditANSIWndProc
IID_ITextHost
CreateTextServices
IID_IRichEditOle

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sql
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ