2df5ddcc0ea1b6e54bb12aee6086974f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2df5ddcc0ea1b6e54bb12aee6086974f_JaffaCakes118
Size

128KB
MD5

2df5ddcc0ea1b6e54bb12aee6086974f
SHA1

282b70466ed934a66d2767a72738467a2d96f546
SHA256

e906e29a3da9f2c2eb4ec846bf218d7e1ae856c6ad2436e10a89163be0e812b6
SHA512

c5de8513ff2874b78858199a1b2e7238488658674bb3693479ffe2c86076faac564c2beefd0c6296bbf7a8ac79922adc4d8f8f8d3f1987ea5a1c376a12f2f325
SSDEEP

3072:FhbEH319CIL6H9mG6Do2dXva/B2XCwfnSuCEhb:Fhb6F936HsGcddC3i4Ib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2df5ddcc0ea1b6e54bb12aee6086974f_JaffaCakes118

Files

2df5ddcc0ea1b6e54bb12aee6086974f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17ff5e91896f957e0435427313ddc48b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushViewOfFile
SetThreadIdealProcessor
GetConsoleCP
GetConsoleAliasA
SetLocalTime
LocalSize
InitializeCriticalSection
UpdateResourceA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.rc60
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rc61
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc62
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc63
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ