00722e6147d4728d4ba1cfbe93f2c985_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00722e6147d4728d4ba1cfbe93f2c985_JaffaCakes118
Size

56KB
MD5

00722e6147d4728d4ba1cfbe93f2c985
SHA1

02875281787716f0c4e1767d6a9ccfb28e5b5bb7
SHA256

fbf440a471f77b67a2bc897cd3d5088bbe29dc9e452be79a8581c2bf17a9cfaf
SHA512

5e9be13d5c154651691ef1e09da8b93304d2103ccc15b1dce4dbb5bf27948a2bcbad1084aea156c0b5245d04a6a074b1c9b86df88b4ee4f613462e52a748cc79
SSDEEP

1536:lTfryra7T8HIi9P6jMPErj3PzCASntr2QD2wQtveE4NrAB:xyra7TkPwj37bH/4E0rM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00722e6147d4728d4ba1cfbe93f2c985_JaffaCakes118

Files

00722e6147d4728d4ba1cfbe93f2c985_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd3248a829463d0ef84676257365e2b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleNumberOfCommandsW
GetCommandLineA
GetFullPathNameW
GetVolumePathNamesForVolumeNameA
GetConsoleInputExeNameW
GetUserDefaultUILanguage
WideCharToMultiByte
ResumeThread
ActivateActCtx
ExpandEnvironmentStringsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE