22f1274f6082a8a4fbcd3bfbb6e90b0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f1274f6082a8a4fbcd3bfbb6e90b0d_JaffaCakes118
Size

8.9MB
MD5

22f1274f6082a8a4fbcd3bfbb6e90b0d
SHA1

a8db583921062dabeaf8d649fa0f611a8eebfab6
SHA256

8eff9dd6c52052ecc5e3a9637ea6c78d3537ecc1fc069a7a7a59ac3787f5a209
SHA512

14c4054ed3a18ae9f5184be54e1862941e19359acba6a8aa70dbd6815b629e4017b417cd35ea8da39eb142d3ad20bea596710a7aa3586d81a9efd0db737a42a0
SSDEEP

98304:8JvQKaXUE2KsktWOkhOxcWp6JlTgv76+pwQIF+eu:M4KaFQOk0qWp4sJNX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f1274f6082a8a4fbcd3bfbb6e90b0d_JaffaCakes118

Files

22f1274f6082a8a4fbcd3bfbb6e90b0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

j6z39dql
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

1czwv0t5
Size: 546KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wao5stx2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ