16bd6241d7ac2a4d8fdc925bbd3e7605_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16bd6241d7ac2a4d8fdc925bbd3e7605_JaffaCakes118
Size

277KB
MD5

16bd6241d7ac2a4d8fdc925bbd3e7605
SHA1

5aa81cb7153b4dc13cc69e6dc57776933e9294f0
SHA256

a2dc0c8f2c528a1730705d41328db4840e83165c1ddcf3e62fc4d133d58ac18b
SHA512

a6fac7514fc829205f507ba42fe4283eccee3fe73cc9c2169b02aa52130c3969aeb378635512fb25aeaa95a74f3232bd2497a5d56b00b14054bb17ca41c63385
SSDEEP

6144:5q/RWGu1wjq6AfR1Yt7e8SFz6zGXnvSZZ:c0Eq6Ap1Fz8G/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16bd6241d7ac2a4d8fdc925bbd3e7605_JaffaCakes118

Files

16bd6241d7ac2a4d8fdc925bbd3e7605_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ada357a343873d99972c33183b8f4c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
BaseInitAppcompatCacheSupport
Sleep
GetModuleHandleA
lstrlenW
lstrlenA
MultiByteToWideChar
GetSystemInfo
EnumResourceTypesA
CloseHandle
WideCharToMultiByte
GetModuleFileNameA
FindFirstFileA
GetSystemDirectoryA
GetDiskFreeSpaceA
CreateProcessA
lstrcpyA
IsBadReadPtr
MoveFileExA

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

gdi32

GetStockObject

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ