2d80a94b3e2e31f0cfe5542e3cd1af51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d80a94b3e2e31f0cfe5542e3cd1af51_JaffaCakes118
Size

2.2MB
MD5

2d80a94b3e2e31f0cfe5542e3cd1af51
SHA1

2d6308472b2a6446398833517950cb9bfed9aa1c
SHA256

0aabd7e57ae291e367f636430a8ce3d647f370b2db75503d464b6cf265a8165e
SHA512

7c23eaede8e9fdcfd77207bb243f79ad59fb008ac477809c1788c7dfc746f4599344613af689d7846a8986991f4efea638e21df5de56f4d0ffeb8658f1e57d19
SSDEEP

49152:2E36iBNmS4bLdZld/B3vkR4gsJxLVlCK/45:OiBNmS4VVdvkrgb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d80a94b3e2e31f0cfe5542e3cd1af51_JaffaCakes118

Files

2d80a94b3e2e31f0cfe5542e3cd1af51_JaffaCakes118
.dll windows:4 windows x86 arch:x86

860ce0d0023ef33ac2bc6690b3a8fc9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
QueueUserWorkItem
InvalidateConsoleDIBits
CopyFileExA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.rc60
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rc61
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc62
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc63
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ