22712fcd82f241f09a788a5b75305f37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22712fcd82f241f09a788a5b75305f37_JaffaCakes118
Size

56KB
MD5

22712fcd82f241f09a788a5b75305f37
SHA1

2cb142531aeeca2dd7c7ce9ceb1162a62939f7d3
SHA256

7804ae9a6aabbe27b3d45a4e405aab98358cb658eb27ea2fa915ea57880b9603
SHA512

27183d7c4887f6c8e5f15048248cbd561f4d7ced1fb799ba2b0671b29cb8fa0d24d90b70b90975ff4719a5452c31db2cf1b34f0215d34b2aa4e001a6c6bed1df
SSDEEP

1536:OFg3t2tsdWLn81s60DbeiPknQJRxixkqD6M5biWIYwWkHXg:wgdhdy8XgjJRxixkQ6GifYwO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22712fcd82f241f09a788a5b75305f37_JaffaCakes118

Files

22712fcd82f241f09a788a5b75305f37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3292ade97671f22c9df6735f0bb9010

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ScrollConsoleScreenBufferA
SetNamedPipeHandleState
CreateMailslotA
Module32First
TlsAlloc
GetHandleContext
AddLocalAlternateComputerNameW
GetAtomNameA
GetDefaultSortkeySize
GlobalWire
SetFilePointerEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE