bd16edf4e8d433722e040f5cce424297_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd16edf4e8d433722e040f5cce424297_JaffaCakes118
Size

164KB
MD5

bd16edf4e8d433722e040f5cce424297
SHA1

3783dfbef1be9d44240921757b08df4b66916776
SHA256

652f2cd106bca449325b2c0298291c3ab52d369c982a7307fddebd7599104169
SHA512

ace5bb3691be64aafb3d5803acf5d73bb22a03d88f9eeea296e0096d3b5188aeda192fd1a864c435a93f15a97e1feb76ae74508beeb5dfc787f09ab38140aee4
SSDEEP

3072:QPz1D8oqNCShJegYDEbr15pHyXp6boUxoH2IcIdCoql/UM7zCtu3028uvBf8Rc:QL1PGPJqytHyHUqH2I1d7mXUT2nUK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd16edf4e8d433722e040f5cce424297_JaffaCakes118

Files

bd16edf4e8d433722e040f5cce424297_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22aa25a9dbb99211db866b1a30897dd8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
ReadFile
VirtualProtect

user32

wsprintfA
wvsprintfA

Sections

eGQ&-F,+
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

`.LAZx+Z
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

QmG?]R6u
Size: - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vH8Wiq/x
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

S Gjst;@
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE