d16d8bfe4e3419d4f5360e9978ba742a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d16d8bfe4e3419d4f5360e9978ba742a_JaffaCakes118
Size

21KB
MD5

d16d8bfe4e3419d4f5360e9978ba742a
SHA1

876d3294ef985c806a0f23794923f49f352ce81a
SHA256

8519413c20e66bd206731eab05c9e974fcd054aabb51c267d9d787510b11f50d
SHA512

503fb5496455e48390a5d05842ea48c2aa97e16c3a48d0c0bb283b2494217dad55c28cb4be5456ca596312795731b23250240267dcf11d7429831c57faf550ea
SSDEEP

384:j/WxVAxwv7v1ahISoMzvrEGr3urPSoAOadQ8ELszjgMsN6963C134uWqd:LWzAa9a9EGr3uCOAELszjjs9uWqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d16d8bfe4e3419d4f5360e9978ba742a_JaffaCakes118

Files

d16d8bfe4e3419d4f5360e9978ba742a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7712c09f2361ee60bc99729ec3dce8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
FileTimeToSystemTime
IsValidLocale
LoadLibraryA
RtlUnwind
lstrcpynA
QueryPerformanceCounter
WriteConsoleA
GetModuleFileNameA
GetThreadContext
GetStartupInfoA
LocalFree
InterlockedExchange
TerminateThread
LeaveCriticalSection
FreeEnvironmentStringsA
HeapAlloc
Sleep
FindResourceA
LockResource
MultiByteToWideChar
GetFileAttributesA
GetFileType
LoadResource
HeapSize

msvcrt

free
_vsnprintf
_getcwd
_fullpath
memset
_wfullpath

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ