16822e8d1b23c9dab4fd09a1e60724c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16822e8d1b23c9dab4fd09a1e60724c0_JaffaCakes118
Size

24KB
MD5

16822e8d1b23c9dab4fd09a1e60724c0
SHA1

b137d339ed6051702bd6465577ffd419cef4f876
SHA256

af17a994d5261c836644bc89e1eaab390cce44e58b5bd240fb34793a58b0dfbb
SHA512

03d8e93ae26258dcd9dcca0d49e15c7c3472691afec3e7fe77e3971dffd589cb1a81eed6f21b17640fed61b822b7bb271f747cac9a24dc22ccc2ee346b2469c6
SSDEEP

192:0tcaK51pVN+nsTvxw81oynL8RrxOXhTvoWxSnhV3qrzK7TzIg6iGjioynkHB+hrQ:0tc97gsT5w81aRraNvovcK7TMCGLfaGj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16822e8d1b23c9dab4fd09a1e60724c0_JaffaCakes118

Files

16822e8d1b23c9dab4fd09a1e60724c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fef0ea3560698814099369d9b99d922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeResource
SetEnvironmentVariableW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TlsGetValue
QueryPerformanceCounter

user32

CreateAcceleratorTableA
DestroyCursor

gdi32

DeleteObject

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE