c22522099dcf141ab634e8d74be2c217_JaffaCakes118 | Triage

Sharing

General

Target

c22522099dcf141ab634e8d74be2c217_JaffaCakes118
Size

98KB
MD5

c22522099dcf141ab634e8d74be2c217
SHA1

c66d5819418603290cae3a4f42993e232613a55f
SHA256

6676e77efb92d43ecd2543473ef0c8fb6ae82a0bbcb858ee2927db7f5e22e4ae
SHA512

ad8ac2cf19315d16570aa407c775c20b681280cb2340c4f2e55ba602373415e16d60fbc76ddd299737d491db1e8af8946b57c8a4a5ddd00a7e8dcfad2a048f62
SSDEEP

1536:kCbBpYpsE1P+FNvBiMZTK4Qoi5yFDM2K9T2Ss+7Sl5E2nsKQJ8qqh:p7hQmFNpiMZTvQo8593sejYVk8jh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c22522099dcf141ab634e8d74be2c217_JaffaCakes118

Files

c22522099dcf141ab634e8d74be2c217_JaffaCakes118
.exe windows:1 windows x86 arch:x86

968940626043346ebb740a3bb5cc74ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
SizeofResource
GetVersionExA
GetModuleHandleA
FreeLibrary
LoadLibraryA
CloseHandle
RemoveVectoredExceptionHandler
Sleep
LockResource
LoadResource

msvcr71

rand
srand
strlen
memset
strcat
strncpy
strcpy
_stricmp
_except_handler3

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 839B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c
Size: 512B - Virtual size: 273B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ