2e4c81cb21d9ed268da4f7843d58d78f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e4c81cb21d9ed268da4f7843d58d78f_JaffaCakes118
Size

40KB
MD5

2e4c81cb21d9ed268da4f7843d58d78f
SHA1

b921baf1a26a91f5cf9f8421b1c0ddcf1336d1d0
SHA256

d272f4b81574adf13b548e3afe2ab35ca0027c394b5d074e4e6198e2016cb692
SHA512

6490d80420b7a89ce4cab57cdb5b405b0cd3a69e1a7e7058125aa905809911ace550e19f07f21dbdf671ff60587dab94f5d8536db7e5954b8c29092d35b7b182
SSDEEP

768:q/cMQMkIqluPfVIkS0GaG8NUfUd79NjHmnMLKDyb+U+Ol8CeNpMEk075Khsb5jNY:q/cOTPy3wB9aE+U6pMc9K6Fji/M7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e4c81cb21d9ed268da4f7843d58d78f_JaffaCakes118

Files

2e4c81cb21d9ed268da4f7843d58d78f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91fdafaac50ef502bc422dec134b57b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWaitForSingleObject
EnumTimeFormatsA
DnsHostnameToComputerNameW
SetThreadIdealProcessor
BeginUpdateResourceA
GetThreadPriorityBoost
SearchPathW
CreateDirectoryExW
WaitNamedPipeA
GenerateConsoleCtrlEvent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE