16126bcd753187cf2a273acff09b97a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16126bcd753187cf2a273acff09b97a3_JaffaCakes118
Size

412KB
MD5

16126bcd753187cf2a273acff09b97a3
SHA1

91f0ce6979fffc8660418478dfc4612f972c94c3
SHA256

e194cd86d3a6ea64452e54a0102e8a4667518d782777fa9c2844fbb1998570c3
SHA512

d0976b9ea363d27ef61f29c39e98373765c4d8c7138e138f947b1ddedd360d41f58dc8a26cc570e385461c372937bb14c02edcc25d750ec843208b2e2ee729d8
SSDEEP

6144:D1kBeF0P07TvOw0gX2oV1Q/tmpRTV4fOO3ZUjfdhuGvMu7l+mApIW1UwGd2Qry/C:mNP0H2tgm0Q0pFeHejiWM79F1Pm2wy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16126bcd753187cf2a273acff09b97a3_JaffaCakes118

Files

16126bcd753187cf2a273acff09b97a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d2b1f7ca72e6108d2426296d03aa691

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
_adjust_fdiv

Sections

.text
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE