22b36d6ed209687bf925f6e0b2218a41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22b36d6ed209687bf925f6e0b2218a41_JaffaCakes118
Size

56KB
MD5

22b36d6ed209687bf925f6e0b2218a41
SHA1

5df5696758d34b76a8ce4a6852cd89e5da72a367
SHA256

a7a7feb4fbd2a6cedd303c3b9fbaeb80801b20e76bfb73d1bfa158fed4ffc1e2
SHA512

b67b39b7b65dc2e3b0afc245545023615f42c6836de65e98e62d37aecc878ce4fe96ac21c90796efb1c9460dc5f65b963020f5ad2a77256fa3b828307e68837c
SSDEEP

768:WULe/TSZ9sj9hku32DAQT7kCgKlQhsxDRfvd8F6jN8zuWHpT9qhE1/qZTuqG97AE:WDfbQxgKGq3U6jfWB4GIZTHG97oM8/14

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22b36d6ed209687bf925f6e0b2218a41_JaffaCakes118

Files

22b36d6ed209687bf925f6e0b2218a41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bba1615c4ef577f466ecf9f0d01647fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
EnumSystemLocalesW
MoveFileW
ConnectNamedPipe
FindFirstVolumeW
IsValidLocale
_lopen
WritePrivateProfileStructA
ReadFile
GetConsoleCommandHistoryLengthA
CallNamedPipeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE