b22a780bdcda58c12e1935a639ee0e7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b22a780bdcda58c12e1935a639ee0e7e_JaffaCakes118
Size

83KB
MD5

b22a780bdcda58c12e1935a639ee0e7e
SHA1

d8155ab1cd62630886adc5b4df94582d940b3d09
SHA256

9e049052c99677a4897887775cf43f78e3f901b4cb7a9a67491dc75e5d79d5db
SHA512

c0bf4558e1120d40fce456f84047b5c2aba0772f03b811379e305b03c0f3b672421d53fdfd21badc7b9ead39e1e2d8042e77a8fddbef57e4aadaa0a30ea78c8b
SSDEEP

1536:YNuoV6dy68wsIJD7w9dVDM53zvqU7jEErxTWDTMqhGKYIZTET8bDQ:YvW78ZIJKdVDcq8jBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b22a780bdcda58c12e1935a639ee0e7e_JaffaCakes118

Files

b22a780bdcda58c12e1935a639ee0e7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19ecf3b0735f71baca80110f467759b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetConsoleAliasExesLengthW
SuspendThread
VirtualQueryEx
EnumSystemLocalesW
UnlockFile
CreateMutexA
SetConsolePalette
FreeConsole
CreateTimerQueue
CreateDirectoryExW
FindFirstFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE