16ac5a7e5ae79ea673c03cda7a56b60e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ac5a7e5ae79ea673c03cda7a56b60e_JaffaCakes118
Size

9.2MB
MD5

16ac5a7e5ae79ea673c03cda7a56b60e
SHA1

cff996342c33a18250e42994959e2a01c0d8dae4
SHA256

96fd2819ea5c86ca443a29fbd97a184b96a3ae1b32238a86d77748739c85e33a
SHA512

389761cefec6dfe6db026a60a95b93cfbf1a488b42122c757110b58d3f347201180194d6fe698b5db2290f15c564be3720cf707c7b317746ae2e296ab2f677ac
SSDEEP

196608:BH0nuS2I20vs7/vc6Io38Xt8iA5fuhxwq+0N9xDcNOiDgMYrwN:BH0nuNB0o/vc/o328iA5fFxg9d6SMRN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ac5a7e5ae79ea673c03cda7a56b60e_JaffaCakes118

Files

16ac5a7e5ae79ea673c03cda7a56b60e_JaffaCakes118
.exe windows:6 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 1.6MB - Virtual size: 23.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.2MB - Virtual size: 13.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pnkumjqm
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ndiwqfcf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ