16658a81a89d8fa4ee982c2268c21f3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16658a81a89d8fa4ee982c2268c21f3c_JaffaCakes118
Size

51KB
MD5

16658a81a89d8fa4ee982c2268c21f3c
SHA1

62024f6bc3e5fa44d230452cb53cebc057b1fd54
SHA256

0a21cf0ace80f27770804c935e0f39d5707434b18f85ddb66c0d71de762b4794
SHA512

20a17aebdf0e2dd25a47d0fde671270ea954d503039c1a3ef01f864ff94920ef8bdf563350d4e413ae21c88b3b4c2e29afc07bf4193d48faf17fc4a339db9797
SSDEEP

768:evw0qLT2IVaR6xGBapGNSC+IwKlZV5e4a0PU1EBVNuZkRzBak:e5qLiPR6xGlZdSUd/ak

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16658a81a89d8fa4ee982c2268c21f3c_JaffaCakes118

Files

16658a81a89d8fa4ee982c2268c21f3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f1f1d623babbf9b62dae0e7efccbec6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
SetEvent
GetProcAddress
LoadLibraryA
ReleaseMutex
LocalAlloc
LocalFree
VirtualProtect
LockResource
LoadResource
FindResourceA
CreateFileA
DeleteFileA
VirtualAllocEx
ExitProcess
GetStdHandle
VirtualAlloc
GetModuleHandleW
VirtualFree
GetModuleHandleA

user32

ShowWindow
GetActiveWindow
RegisterClassA

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ