22bde9790c5dc7dea24a549780802793_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22bde9790c5dc7dea24a549780802793_JaffaCakes118
Size

30KB
MD5

22bde9790c5dc7dea24a549780802793
SHA1

49d31000cf81ed23f394d95cc62f81a219d2e571
SHA256

f653a2843fb1ac9c24f0d7f96d7f6d2a9f21e8220ef24c36dfd222deb8b03280
SHA512

41816fae9a7f875141aec010b29b5abfcdd21f5e7bd8098d2fff1810e88d393d4eb17e257c31dbae80f057259ca0ccf982c9d0aea7932446850804c6740e2ac0
SSDEEP

192:yJssdMQf8kIi1oynvZlICPavcNZu3+gk50X+o2b2du5kyXENktM:8TSi16CPa0uky+o2yddyUNkt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22bde9790c5dc7dea24a549780802793_JaffaCakes118

Files

22bde9790c5dc7dea24a549780802793_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33bf226a6afed93138bf538a40e73a6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
LCMapStringW
HeapAlloc
GetEnvironmentVariableA
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

ole32

CoInitialize

msvcrt

_adjust_fdiv
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ