22e57151cad9bfbae4763ba505597020_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22e57151cad9bfbae4763ba505597020_JaffaCakes118
Size

56KB
MD5

22e57151cad9bfbae4763ba505597020
SHA1

dcff58b000cd4e07961815b6ca4a2815b5288cb6
SHA256

1d056c16911216a17f3f912d7652e0ec05f15a4b3058270fddcf0f90e4a0b4e2
SHA512

0148841d708098d3ee70e9d5f9aa4a7c81e216c1e44c96233a8fec0bdc82a6941c609e881fd9cc38ce847d7d64f0f8abddeb7808490c8b2b276b47bd68dcf1df
SSDEEP

1536:eDSpjNHUbqR+Aghsu2mC7qJlpHoIpFlCh78X:eDSpj1UXA/u2mAqh9COX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22e57151cad9bfbae4763ba505597020_JaffaCakes118

Files

22e57151cad9bfbae4763ba505597020_JaffaCakes118
.exe windows:4 windows x86 arch:x86

665afcbb3aac79e498da639c57c11ade

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
IsBadReadPtr
Thread32Next
GetProfileSectionW
GetSystemDefaultUILanguage
GetDefaultCommConfigW
SetHandleInformation
GetUserDefaultUILanguage
BackupSeek
GetCompressedFileSizeW
GetPrivateProfileStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE