d22666a74cd6c39af85be25b2d406f6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d22666a74cd6c39af85be25b2d406f6d_JaffaCakes118
Size

360KB
MD5

d22666a74cd6c39af85be25b2d406f6d
SHA1

21a30675ef854e76c442fa2a4d8365ef635f5847
SHA256

03b19aaedb5a0d86f466734c0ce2af64fe415c451fc5311b98d11394858c896f
SHA512

2622bdcecd32ef987d451f8af95a3947dc1ac569228c3a911aaadb183bc357335129e864969d04a1f1f44ae841eabd292104de3e93d8338d74e3495d0cc32964
SSDEEP

6144:SZ411sSlAFgFOMI2FJYI9etNsb6Ypzj8tc/4rr+JtPEZvkC/aT8yH+M:fsSlAFZM3JYI9Msbtzj8Gw2lE9kCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d22666a74cd6c39af85be25b2d406f6d_JaffaCakes118

Files

d22666a74cd6c39af85be25b2d406f6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e94f69267559b1f52a371105b28fd3cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
ExitProcess
Sleep
GetCommandLineA
GetProcAddress
VirtualLock
CloseHandle
UnmapViewOfFile
lstrlenA
GetTempPathA
VirtualAlloc

user32

wsprintfA

ole32

CoUninitialize

msvfw32

DrawDibTime

crypt32

CertEnumCertificatesInStore

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 606B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: 12KB - Virtual size: 491KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ