16e3afda2692b63b0838160a6741058d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16e3afda2692b63b0838160a6741058d_JaffaCakes118
Size

3.3MB
MD5

16e3afda2692b63b0838160a6741058d
SHA1

2b9f19629539d5ab5485533c318d2ff9a5308664
SHA256

0add43af303597f8c09eeeb0c961c3e8af25df6228869c581f8ba6bafc3a7c73
SHA512

9833533faf5f386b4a5aa380b3be50d350f5c8aabaf010b98b0f2e226e3ae3f710c9172ee03970738675515cb69e035cb1fbcebe603f989f25cad26fb6a4a0f0
SSDEEP

24576:d7cRi+yd/AYF7hUl4PaByGwVV/LL/EC913cqVX/dHyUiwJOSmiZCiH5bIrQ3IXwo:mYUlHy3VV/L1BVvDiEZxbv3lGH9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16e3afda2692b63b0838160a6741058d_JaffaCakes118

Files

16e3afda2692b63b0838160a6741058d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f48c95849c2950d447f186c59e89645

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetVersion
DeleteFileW
FreeEnvironmentStringsW
CloseHandle
Sleep
FindClose
CreateEventA
DeleteFileA
GetConsoleCP
WriteFile
SetFilePointer
CreateThread
HeapFree
lstrlenA

Sections

.text
Size: 741KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ