16c85be23f8efe01cec10ddd7fbf99b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16c85be23f8efe01cec10ddd7fbf99b4_JaffaCakes118
Size

67KB
MD5

16c85be23f8efe01cec10ddd7fbf99b4
SHA1

08e230f5fbd890f7b9fe5d205ed4a90d64ab502f
SHA256

65ec9407c08ac1959e9110d5d3166f9262fe4844f8c3700117d64bac4d9092bc
SHA512

d19190fc774a386147264073274f935e13e14ecf5bba9b6f795553b8d1dd4c288005f856c4e414b3b57e19fd471cedfad39607b802a95a7eb527e3ee7de16651
SSDEEP

1536:bQFeA65V6qWR0AMIAoUR+e3KOX4CflF+ccFBRK8+o:bvHr6n0Z/3ToCflF+JFH7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16c85be23f8efe01cec10ddd7fbf99b4_JaffaCakes118

Files

16c85be23f8efe01cec10ddd7fbf99b4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 47KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE