16295515c5c15283664f62c1ed69f814_JaffaCakes118 | Triage

Sharing

General

Target

16295515c5c15283664f62c1ed69f814_JaffaCakes118
Size

177KB
MD5

16295515c5c15283664f62c1ed69f814
SHA1

f1147f53bc15e0e12565114130c5990182bf6ad5
SHA256

28467c139ceed56091000debec77b7e29275e6df997a127bf01bef65dcf0502f
SHA512

f86beaa6758f11bbd22d9e393fa74ad747ec3b9f7eab4a51c269c77ce931bbc8ecdf344dc2db941ae3eb2bf68ac24f84aa0a21fb5531c8b2bf12e49aac71d903
SSDEEP

3072:/mTumYf69yfyRkooAVR+JfTLHrtDdzig8zCdQ27tT9rpjVd:sQVdoofP5p6zKQ27tTjJd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16295515c5c15283664f62c1ed69f814_JaffaCakes118

Files

16295515c5c15283664f62c1ed69f814_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38404d0363f6d57ce9d0e2c3cf338bf8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
DuplicateHandle
MapViewOfFile
FindResourceExA
EnumResourceNamesW
SetEnvironmentVariableW
FindFirstFileA
UnmapViewOfFile
GetModuleFileNameW
FindClose

shell32

Shell_NotifyIconA

winmm

timeEndPeriod

rpcrt4

NdrFixedArrayFree
UuidCreate

user32

RedrawWindow
TrackPopupMenuEx
DestroyMenu
CreatePopupMenu
FindWindowA
ClipCursor
GetDesktopWindow

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ