22a182f36a1b59e58e9592dd0471930e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22a182f36a1b59e58e9592dd0471930e_JaffaCakes118
Size

113KB
MD5

22a182f36a1b59e58e9592dd0471930e
SHA1

2dd264687ea1a67b5106098ea95e2846f3372964
SHA256

12e9ec7d440841a9435e3a02d629c19e84f56aad76723bd49e9477b9e7977483
SHA512

49100979c2eb9abc6bc37fb0bfed4b90567ceb5e0f4517f44ae3fbc98d24fab0909d3737a6d66d68474b2e00fd8880754551e998d0e6236fb1a6e1664fb71e0d
SSDEEP

3072:W6lLPcIfJjsRKlUIs2rFM9Na/aysl5e/pdhAWI:5wn2rGXIaLje/p+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22a182f36a1b59e58e9592dd0471930e_JaffaCakes118

Files

22a182f36a1b59e58e9592dd0471930e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68140a9a4b28871f88884585977b9263

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
CompareStringA
GetProcAddress
LoadLibraryA
GetTickCount

user32

DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ