22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118 | Triage

Sharing

General

Target

22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118
Size

49KB
MD5

22563b7a2c5753365fd3b82ea0ee60be
SHA1

655734bd4757e861c31fa18bc9e6d1ab6a09c8ed
SHA256

bbc0b5bcbf8e8f628d7901d33e1d665d8925a6c1dc81a5f73e7981de52d4a684
SHA512

db1519571426ad129653f9544dea263554bb739425ad5508074adad44353cd1ef9262968e1349c15315ffd7373491b5930aae3cd157e716bf65b8a870eead269
SSDEEP

1536:vf6/1rW7bX1dNc8xhT6/lwLEQuWynmRZeCN0vfv:vi/1rWvX1dNX69wLEQuFn6ACNWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118

Files

22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fe964f82fd57f5fe5af99187f72146e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleA
GetLastError
SetLastError
CloseHandle
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE