22ccb0e348025aedd68f48d99a8d4132_JaffaCakes118 | Triage

Sharing

General

Target

22ccb0e348025aedd68f48d99a8d4132_JaffaCakes118
Size

66KB
MD5

22ccb0e348025aedd68f48d99a8d4132
SHA1

928f77f7c7ac389a910a365050b9ff8dcbb99d03
SHA256

3d7fa5469125505cdbe86664ce91708886893cb0cb863bfe7a8e8c1ab3768a9b
SHA512

f9896eaedd98cdee303006e85d4d1f411a6cc754aa742e05d1284a1f8abb92ab4a80dd86bc5d7eb4e275d16a6f0838dc073f42579d7ef5209a2da6b0244b7b1d
SSDEEP

1536:QFRTDipu+PMaqObnFcvqZEEZdzJxnETFo:QFBtNObnFXE8fnqo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ccb0e348025aedd68f48d99a8d4132_JaffaCakes118

Files

22ccb0e348025aedd68f48d99a8d4132_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a230a7a4f2aa505b156ab4c2c147c3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
CreateJobObjectW
FormatMessageA
GetModuleHandleA
CreateDirectoryExA
SystemTimeToTzSpecificLocalTime
SystemTimeToTzSpecificLocalTime
UnregisterWait
ValidateLCType
GetAtomNameA
SetVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE