16fddb8ac4d11916c6920260593ddded_JaffaCakes118 | Triage

Sharing

General

Target

16fddb8ac4d11916c6920260593ddded_JaffaCakes118
Size

3KB
MD5

16fddb8ac4d11916c6920260593ddded
SHA1

058ef57237f2898e77a3e65b8b3ded1371a831cd
SHA256

1500f761104965c6ba4d4e8cdc3524347f6b189fc95178569a37a1fa870a2eae
SHA512

41cfb9ff0455477b0025cfad30c99fe030ba49fcf836d959af8893cdd363429feccac3d9322986ae2b45201367b88ccae42dccd4bb36251a70644ea2ea222243

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16fddb8ac4d11916c6920260593ddded_JaffaCakes118

Files

16fddb8ac4d11916c6920260593ddded_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1d85c957fc5b45e695bb43fe670502c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
Sleep

Exports

Exports

MagicDelete

Sections

.text
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ