226d267ef73b24bb79b9f1cd6e14c712_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

226d267ef73b24bb79b9f1cd6e14c712_JaffaCakes118
Size

56KB
MD5

226d267ef73b24bb79b9f1cd6e14c712
SHA1

c3065b453cbca5b40063f0ded4058d373ab3ce0a
SHA256

8256d616208f9aae94ced27f5959d14977a049e58be87f8eeef21e1c2f88d028
SHA512

375f5cf74020c58e5ca7afefd3823ffc8647cf77ac1f1195907fc27b4f7c40f79ffaedc7e83dc6aa4016eaddbb3039c791bb5f32aa2808d599b0cf61f2d95201
SSDEEP

1536:oKmqt+lILL/SnxnSANEYc3CWbo6lPijmezo4cZZsu/VaVChsQvjbGuDSzputRYDe:9/0W5J427zPFBhJjWffGiu5+J+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
226d267ef73b24bb79b9f1cd6e14c712_JaffaCakes118

Files

226d267ef73b24bb79b9f1cd6e14c712_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e36079b9e1d369f11a75509d45581fe1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TryEnterCriticalSection
VerifyVersionInfoW
BindIoCompletionCallback
CreateRemoteThread
WaitForSingleObject
GetFirmwareEnvironmentVariableA
AddVectoredExceptionHandler
GetPriorityClass
FillConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE