22b4a7f5717a2e12e034d5f892dd9b16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22b4a7f5717a2e12e034d5f892dd9b16_JaffaCakes118
Size

163KB
MD5

22b4a7f5717a2e12e034d5f892dd9b16
SHA1

82348a414079427950b8116285e9b7a3d0b86937
SHA256

e7c882d8d9c4f08a78d8744f6cdae0f07f31fa9b5663a221ad285bceddcb08f9
SHA512

34afef2cc538526d21ce4d78191ee37f7d297c765dcbd62e8e4b6397b2158b6da65c511affeebfbd29136c0a52afd63ec3efa4fa69d6cc13a64578349bfe7168
SSDEEP

3072:aSwJ154xJuLnOvbcV+5aald8vIeZ5NAGn6uPnBMP/GVQHKEZ:P3yjOzcVCZv8vD5Na8hVr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22b4a7f5717a2e12e034d5f892dd9b16_JaffaCakes118

Files

22b4a7f5717a2e12e034d5f892dd9b16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fa1d1e57c3ac0ab76413d883c4e83c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
ProcessIdToSessionId
GetProcessId
TlsGetValue
EnumResourceTypesA
InitializeCriticalSection
TlsFree
TlsAlloc
GetStartupInfoA
GetFileType

oleacc

LresultFromObject

user32

GetWindowInfo
GetDC
LoadCursorW
GetUpdateRgn
MessageBoxW
RegisterClassExW
CreateWindowExW
EndDialog

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ