22ebb4217c3292cf88f80970530325cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22ebb4217c3292cf88f80970530325cd_JaffaCakes118
Size

37KB
MD5

22ebb4217c3292cf88f80970530325cd
SHA1

755b97203ccb3fc831acc89a0838d356369a55b2
SHA256

15c67c6d975b915d3aa743b3722b61413ee92f5e4a7ebd54fa0e957006df23ae
SHA512

916230d0fc8e325835c6b7b00b2c94ed71707bfa5b0c79671fa781d81d40dd44ffbca2608e68e4c6bcc72019b1442a78d638bd4080631ab74da5b5c5fc1785d9
SSDEEP

768:cl4gNRM93jEieplIaXnnGP3CiNNVVePwx7KYdOlK8bUIohlMiIwHda4m4Q:LgN293jop6wE3CQNVQPoWdoBbHdc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ebb4217c3292cf88f80970530325cd_JaffaCakes118

Files

22ebb4217c3292cf88f80970530325cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6a7c4d3b35eb50627c9f1f474225c20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlNtStatusToDosError
NtCreateFile

activeds

FreeADsMem

crypt32

RegQueryValueExU

kernel32

VirtualAlloc
HeapFree
FreeConsole

Sections

.textbss
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE