c16da8f082d2ee71cb9cff395c6e7ebf_JaffaCakes118 | Triage

Sharing

General

Target

c16da8f082d2ee71cb9cff395c6e7ebf_JaffaCakes118
Size

94KB
MD5

c16da8f082d2ee71cb9cff395c6e7ebf
SHA1

1f6f829c4d5d866c87fe4e316694f8dfe0b4e07f
SHA256

55ede14b2dbad82dd5fcc13fd8ee5a5a8a419621f4958f88643e3f944144660e
SHA512

90d98bd8fc4fbc22b94b88b5918d88f4e3556e4a4643b254f8283b5c31035a96bfcbb175c2b2fcca0064854af72989fcd25fc30a566931c92ab4544426e0199f
SSDEEP

1536:lzAX/kLsqQxGoXhTSbwQInU0XdijI01e+dKxIkbTdFhDZqJyQgDOXSk:GkLQ7FIwQIZXdKDdCIkbnhDZq0QgDOXn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c16da8f082d2ee71cb9cff395c6e7ebf_JaffaCakes118

Files

c16da8f082d2ee71cb9cff395c6e7ebf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

255baa199749cf1034252ceb61a58ccd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetLastError
VirtualProtect
GetCommandLineW
GetModuleHandleW
GetProcAddress
InterlockedExchange
ExitProcess
GetEnvironmentStringsW
Sleep
GetSystemDefaultLangID
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetProcessHeap
GetTickCount
QueryPerformanceCounter
GlobalAddAtomW
IsDebuggerPresent
LoadLibraryExW

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ