16db986cefb79c6b88b99501558b0104_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16db986cefb79c6b88b99501558b0104_JaffaCakes118
Size

15KB
MD5

16db986cefb79c6b88b99501558b0104
SHA1

989f31387b10d5ca615e7a3819b5c2cf90dc8a44
SHA256

2d755928e6f6bac87417397610e80042c569076ccf36a37a5c253086104b4aeb
SHA512

bfd81212fcfcdc94a0ac8df1125edb7e83dd98f257f840453f4f722dd605effb17c52227c1f84f1eb1ceaa219b0a0a44964ae22e7390079f9cb79da868e3fc48
SSDEEP

384:lNIftzysgeXE8vVzeoaKvWJ5XMLSJIJi:lNcdysgUrJeYWJ58gIJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16db986cefb79c6b88b99501558b0104_JaffaCakes118

Files

16db986cefb79c6b88b99501558b0104_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c917eb3f7d2f0da3cf81b1a1b3232da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ