16b5230d7d2a1717800aee0fc6624de1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16b5230d7d2a1717800aee0fc6624de1_JaffaCakes118
Size

632KB
MD5

16b5230d7d2a1717800aee0fc6624de1
SHA1

b104021e597e4bfb5848c7fa5362c246ab03738d
SHA256

e3cac93351a6cfc99adb30c30137cd1b5bddc559527d1da373ac17d75a52e3d0
SHA512

615631fa8a6fc1a51bdf279719cb0e8175e45d8ff5e7817f8475b5fe313db1c6f9830325b6bee37e9bc91edb4435e4c8533b274d160ff203da2f2be92e66cd11
SSDEEP

12288:C3XOndk7TbCMPW5A6X4tbAYkrYJAeZ1sug8Gy0t8wGpB5NyLvnbRaGEcY:C3edQbC8W5A0YirYhicGy0t8w3vbRZy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b5230d7d2a1717800aee0fc6624de1_JaffaCakes118

Files

16b5230d7d2a1717800aee0fc6624de1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b047c562abe6f9b54431dfd405ea8a43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
ExitProcess
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
CreateProcessA
GetStartupInfoA

user32

wsprintfA
MessageBoxA

shlwapi

PathFileExistsA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 620KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE