16322ed6441fdc4da3d26232d4c3bd7f_JaffaCakes118 | Triage

Sharing

General

Target

16322ed6441fdc4da3d26232d4c3bd7f_JaffaCakes118
Size

64KB
MD5

16322ed6441fdc4da3d26232d4c3bd7f
SHA1

2c19c6706a958ec65ebfeee2c4100c533864a237
SHA256

bbcafcc477e27cf4908cf631181c9cfc1aafd1dea4bb795a7a9a7746af2d9602
SHA512

22baa7761d45624920edd34847917b3b18857e3ccbd12f7580f2aa4a27bce481858c3ae97998c619d471b2acfff15fb7599a1598e93a6403a8db91be8e819324
SSDEEP

768:27o5yBL75PYDPYnrwuNpIbMSRizyM+D+NV1LpoDrY56n/:27o5yBL75P3pD/+StpArX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16322ed6441fdc4da3d26232d4c3bd7f_JaffaCakes118

Files

16322ed6441fdc4da3d26232d4c3bd7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e4aec049ca0c33d8a27e8b92b27b127

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
OpenEventW
GetModuleHandleW
GetFileAttributesA
CloseHandle
GetFileAttributesW
SetFileAttributesW
GetSystemDirectoryA
WideCharToMultiByte
lstrcatW
lstrcpyW
GetCurrentProcessId
CreateEventA
lstrcatA
WaitForSingleObject
ExitProcess
GetCommandLineA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next
Process32First
CreateToolhelp32Snapshot
CompareStringA

user32

wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegCreateKeyW
RegOpenKeyW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE