722f3e49c9f3b88bf6bf8be79ecd85f8_JaffaCakes118 | Triage

Sharing

General

Target

722f3e49c9f3b88bf6bf8be79ecd85f8_JaffaCakes118
Size

20KB
MD5

722f3e49c9f3b88bf6bf8be79ecd85f8
SHA1

5ff4738143636467846fda9862a870ff59857a99
SHA256

80a722667133f409d502219ebdc0683abbb0fbe21ccdb5aaa50c03901fd76fcd
SHA512

aca9ecc295c9d7e65d03743592a5fdddd63a30a3c9d65d92515269aa8e2193364ce5416dc7cc76a19c4e5dcc94b2069e6fa423e7fa57834714df00f18baac1de
SSDEEP

384:yuKjzDmjtOK2sUUQWIALd1dAHzudydBMfe4eRSWSZWa:k4Ud7CdydByblD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
722f3e49c9f3b88bf6bf8be79ecd85f8_JaffaCakes118

Files

722f3e49c9f3b88bf6bf8be79ecd85f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2956c3907da62cb260497ca4c38641a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtect
ExitProcess

user32

CloseWindow
IsWindowEnabled

Exports

Exports

Xgrwxojej

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.virtsec
Size: 1B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ