22f57d6e43d007cd3668d225c24b9be2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f57d6e43d007cd3668d225c24b9be2_JaffaCakes118
Size

948KB
MD5

22f57d6e43d007cd3668d225c24b9be2
SHA1

492fa18dc20ea8510b6ddd92c1d1f6b41ffa7bbc
SHA256

972afcc3c1bc47bce0d505fffcb23e6f93966cafef48d1c8d3119e516dd8bba0
SHA512

e421de7147ed3899b45bb212abd6d25d87039d500311a4188e1c8245f5aa50923497d2f6b12abf861746c8fd6c72b4d36e73762ee8c93f64c08701f22c3835e6
SSDEEP

12288:HVJeGmd6QwRzYh0fHAcosXUrc3+9a5HnNfLgGYTjW1gsvyaO5JhU0SIqh:HVIGcwRch0vkQNfkGYTjAXO57UCa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f57d6e43d007cd3668d225c24b9be2_JaffaCakes118

Files

22f57d6e43d007cd3668d225c24b9be2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aac60df60ca85a65dc1aa5d99d8cccdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
lstrlenA
GetTempPathA
RemoveDirectoryA
SetCurrentDirectoryA
EnumResourceNamesA
GetUserDefaultLangID
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
GetPriorityClass
GetCurrentProcess
GetCommandLineA
lstrcmpiA
DeleteFileA
SetFileAttributesA
lstrcatA
GetStartupInfoA
ExitProcess
GetModuleHandleA

user32

CharNextA
wsprintfA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ