c016eed76e4d5f6362fc48b25e2e128e_JaffaCakes118 | Triage

Sharing

General

Target

c016eed76e4d5f6362fc48b25e2e128e_JaffaCakes118
Size

21KB
MD5

c016eed76e4d5f6362fc48b25e2e128e
SHA1

960f6dd98d5854618ed75b49ce183a0884ea9c5d
SHA256

d4de9a8af67958ab5ae5c87ddf947d22504a91ca263f2ac411d2cb11b7c742b0
SHA512

c3008464c0313180419e2be8fec3722c54b60d5ded31e4b14ee4458e40fcf07672ae525c33bd75344dd32f815b892c0615adc079a10df719242e6030c21a44a4
SSDEEP

384:HiCEJz2SPCCRVYX4hTZfOl/gnsDI8KWNMIJeO8sm7kxju4KLJTJiG:HiCEN68Vc6Zk/gnse0M0eO/5uvUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c016eed76e4d5f6362fc48b25e2e128e_JaffaCakes118

Files

c016eed76e4d5f6362fc48b25e2e128e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e6ed844be4beb57ff8078e7326fde044

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
GetDiskFreeSpaceW
GetFileTime
GetLocaleInfoW
GetNamedPipeInfo
GetProcessHeaps
GetProfileIntW

msvcrt

_cgetws
_chkesp
_logb
_dstbias
_eof
_errno
_execl

Sections

.text
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE