16bf6b0b2ffeeb217a93c2a1e7c36fb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16bf6b0b2ffeeb217a93c2a1e7c36fb9_JaffaCakes118
Size

156KB
MD5

16bf6b0b2ffeeb217a93c2a1e7c36fb9
SHA1

fa3c7b8184ea0be82c3f3830d91a53e1397733da
SHA256

ab048ecd88286a8918e1aab0181ea5257268b934fcd3bd966897c781548a8b1b
SHA512

f16d8e5dd01c3cc13ba77420f8841defd7be107f28f678a0c2a9ad8e60292420b909e5a9e14f878791ddfdfb9e497eb19e9c036e3d89a4b589b70b5bccb3ba3d
SSDEEP

3072:5k4T3RzdaQO253emX7e3pI9OxnqyfSRdEkk8mFVaUaWSkV5UXvcr6rwLW6rEnOYF:HdaJ25OgSQOVHflZFVasSkV5QrwLW6rf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16bf6b0b2ffeeb217a93c2a1e7c36fb9_JaffaCakes118

Files

16bf6b0b2ffeeb217a93c2a1e7c36fb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0360ebd65017e778ad82c213b454298a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
GetSystemTime
GetFileAttributesA
CreateFileW
AddAtomA
VirtualFree
VirtualAlloc
GetModuleHandleA
GetProcAddress
QueueUserAPC
GetCurrentThread
ExitThread
CreateEventA

user32

DestroyWindow
PostMessageA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ