22bb3382f6627b4a8a0db11ee6192305_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22bb3382f6627b4a8a0db11ee6192305_JaffaCakes118
Size

528KB
MD5

22bb3382f6627b4a8a0db11ee6192305
SHA1

7f8c59be13af0146b7d2a29a596208888de5bf63
SHA256

7d2ae08549cd8abf65e29f766c58567d27d834f7fd802465ea87158ead1c57de
SHA512

371b0e3e597f60d7f682d1258cce76c69dfea8f4f3d896fcdaa8caf22ce454d6493996afc2a5eca0b33dec27ef02128e2713cb3d3879808f161a8cc77404851a
SSDEEP

12288:IJLbQ0vLs16v3gOqm0wh2DhqpnAToZ2Qmt:IJLE2F3n50wS82Qm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22bb3382f6627b4a8a0db11ee6192305_JaffaCakes118

Files

22bb3382f6627b4a8a0db11ee6192305_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ