16a7c335965065e00a390f65e84cae70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16a7c335965065e00a390f65e84cae70_JaffaCakes118
Size

152KB
MD5

16a7c335965065e00a390f65e84cae70
SHA1

1d7298eb5c6e58b36a09855b7ec469e639d1fafc
SHA256

b7ab890709ebc0de76166a06175588c45c3fd5c76f6fe14e60c7def7f9dd7e1a
SHA512

dc022fa1e493e17e64723ca76a8dd90a367ca32624bb791a573754e2a575dce480e7b88df566a1cfc6086ab9b834b2294a2ec3201771914d22617a37bcbd60e5
SSDEEP

3072:mCo+JFIsuc5ul4BNMSq35xp6xXA5B9Lb/BjTv4kN50clZhoPSyZ1sZe:mv+bIc5u7Sq35ixXA5B9LbpTv4zMfoPX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16a7c335965065e00a390f65e84cae70_JaffaCakes118

Files

16a7c335965065e00a390f65e84cae70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdba83c2f5023bc556b3a1ad94761545

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
CloseHandle
GetVersion
GetProcAddress
GetModuleHandleA
GetCurrentThread
LoadLibraryA
LocalAlloc
GetFileType
VirtualAlloc
GetSystemInfo

user32

CharNextA
DispatchMessageA
GetMessageA
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ