2d2da3621dbdbbfa575135190887ebab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d2da3621dbdbbfa575135190887ebab_JaffaCakes118
Size

112KB
MD5

2d2da3621dbdbbfa575135190887ebab
SHA1

a4eb82df3f18f2774d6c5de36082db89e83cbd49
SHA256

e7656270d203fad99208c0a7c8423a920d42e1f725a0d487ccdcf9aa7fa6bb17
SHA512

14c69ac0fd9a57619335de304388154a21156e1ab85bede6b58ae0adc6fb9c6e627b9329b87426d506d2b1cb5a79596bdeb2f0ec967ed59f0efb9f260e2622db
SSDEEP

1536:NvW90XkLUw4YHE7BHSXYlzJVbQUGQ8vbwjj0HJgl5IsVnaLkVm+HKsAiDa:Nu2XPw4TtyXYl/bQUuU0H6MImV5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d2da3621dbdbbfa575135190887ebab_JaffaCakes118

Files

2d2da3621dbdbbfa575135190887ebab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3cc7584cb83b97510d16cbf5a3fadfee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetCurrentProcess
GetCurrentThreadId
GetOEMCP
GetProcessHeap
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
Sleep
UnhandledExceptionFilter
VirtualAlloc
lstrlenA

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ