16199e7c7f4d360a143a17e5860fcf49_JaffaCakes118 | Triage

Sharing

General

Target

16199e7c7f4d360a143a17e5860fcf49_JaffaCakes118
Size

348KB
MD5

16199e7c7f4d360a143a17e5860fcf49
SHA1

8b68750b4f803c27a79c4d1f25fedb3bae0ddefc
SHA256

483b237b460cb26f476aaf4b62a3fb5f60b04f90216b79f8c2270198d2d9119e
SHA512

2674d58ee81f540a507f57328d2d9d606e9c23dc6790b7598c73ac06f23690b475dd71a169fd84cb03fcac66b4839ecdeab562df653ab52f6e7a278f5a98bffd
SSDEEP

6144:v05fXinu2/sQe+wLd2wcrrE2iPismhJmP:gaf/sQVEd2wcrI2iasowP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16199e7c7f4d360a143a17e5860fcf49_JaffaCakes118

Files

16199e7c7f4d360a143a17e5860fcf49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a4966457916b4c35905346dd33847ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetSystemDirectoryA
GetModuleHandleA
CloseHandle
UnmapViewOfFile
lstrlenA
VirtualFree
GetProcAddress

user32

wsprintfA

ole32

CoUninitialize

crypt32

PFXVerifyPassword

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 755KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ