16417694246616636ddf8c94170c2230_JaffaCakes118 | Triage

Sharing

General

Target

16417694246616636ddf8c94170c2230_JaffaCakes118
Size

400KB
MD5

16417694246616636ddf8c94170c2230
SHA1

2f4bdce2a63019f2f8ce0a19bd2dc236b7cb4747
SHA256

e5c994cc2f910298aac150e4098749e84924a2b937f7e342bf528fab6473a8bb
SHA512

644259c5b6465d8fd915160b5508f975d9bd426ec1b7df5a3d46bfbcce860b89816902e21b10a76083989d7e9111b451ca48845dc80da53475e2e40341c58ef7
SSDEEP

12288:K2zOsZ7wXWbZrlv2Myt/9m8erKJ0PbTRfYGG0JQ6Cw2y:nOsZ7wXWcL+m0DVYGFT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16417694246616636ddf8c94170c2230_JaffaCakes118

Files

16417694246616636ddf8c94170c2230_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5265396cce55c7fc139786d860943929

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
GetProcAddress
ExitProcess
TerminateProcess
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ