22b907be84a9e44e993ef567f7abb536_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22b907be84a9e44e993ef567f7abb536_JaffaCakes118
Size

62KB
MD5

22b907be84a9e44e993ef567f7abb536
SHA1

8f5805892f07cf6e9b3c6f9c2d067baff4303ab7
SHA256

6d1445e606f2657d4a1dac2468bfd08ffdd6ebf51ab4bd12727561d4a3ace573
SHA512

b65f3d6759a9cba1b1ff81c372557f1f5706aec9ae0df6881445ef647cf638ccd2b8d0deebfa2d4cf91c3ae5c20ee8d2d5b957141a34e6e16d36de0a34b884e9
SSDEEP

1536:U06bdh2BbheDhqxHKwJ75KcCzDHraaA53:gbdcBb0Dhq5KoKVnraaU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22b907be84a9e44e993ef567f7abb536_JaffaCakes118

Files

22b907be84a9e44e993ef567f7abb536_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fd90163dd0e106802f9218583ba35ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetFileAttributesExW
CreateMailslotA
SetConsoleActiveScreenBuffer
GetBinaryType
GetUserGeoID
DosDateTimeToFileTime
ExtendVirtualBuffer
GetModuleHandleW
SetConsolePalette
RemoveDirectoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE