c16b456d3236152f9b10255f50589ffc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c16b456d3236152f9b10255f50589ffc_JaffaCakes118
Size

98KB
MD5

c16b456d3236152f9b10255f50589ffc
SHA1

92ef60a2f728584e6866c8292d7f4804eccdbecf
SHA256

05b09458d7a9781f6150a4a4c3ff57841b9376e4cd4b17b767fdca15555578db
SHA512

6048a6e0e54f63cb91857d44a4e06291758b890d159b89b792754767f2c2e46e57c2651f36107f55291215d99e7bfaba86f85a00b2661b710d0c0e33d149c897
SSDEEP

1536:R5nb8m4UXa3qOpyAbGoLRKlVHTluKZZeAWXJlBRf7fy/HCZL:Rd8mR8RbHLRKTJuKZbsrUHCZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c16b456d3236152f9b10255f50589ffc_JaffaCakes118

Files

c16b456d3236152f9b10255f50589ffc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee6090de7a865bf1a6831bd05645bbf6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
RemoveDirectoryA
VirtualFree
ExitProcess

user32

GetDesktopWindow

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 241B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dsfwer
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ