e222ce2e1dbf36fbc7ef76f6d1ca099e_JaffaCakes118 | Triage

Sharing

General

Target

e222ce2e1dbf36fbc7ef76f6d1ca099e_JaffaCakes118
Size

65KB
MD5

e222ce2e1dbf36fbc7ef76f6d1ca099e
SHA1

85766f517294a0779cb4634e7177e2ad60e36cef
SHA256

aa92c00678492858f83e388d142f0570823209c5c2230de2333b49ffb68f9c14
SHA512

2a1e337ea96eb69720fc63671c278f3445ee94af4702d9497c2ec6aeb4bc8e5044e314bdf022de4d5330c07dfcc6393f65504236c1abc8352dccbf0e2c54c82f
SSDEEP

1536:LBzYHWMeW0i4eE/b0XGJY1pz9k/nk0a9sk+5zf2VI+LlvdzGDC7:PMeLi4eGAGJap449sxUd77

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e222ce2e1dbf36fbc7ef76f6d1ca099e_JaffaCakes118

Files

e222ce2e1dbf36fbc7ef76f6d1ca099e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

188017c374a31c7644583effc6b5cf2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
OpenMutexA
WriteFile
SetFilePointer
ReadFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
WinExec
GetTickCount
Sleep
MoveFileA
DeleteFileA
ExitProcess

user32

PostQuitMessage
CreateWindowExA
RegisterClassA
DispatchMessageA
TranslateMessage
GetMessageA
SendMessageA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ