16b7c2552da68548fef15a5aee2211c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16b7c2552da68548fef15a5aee2211c0_JaffaCakes118
Size

56KB
MD5

16b7c2552da68548fef15a5aee2211c0
SHA1

68df8fb79bf2793299500c057f03bd266f88753b
SHA256

3fa547b7237b16be02a0122b9e4fead6eadb17070e7d38a7a3d911c3e644978c
SHA512

8e280f049e64dc4a5f1e5bbe798f17c8cde8c9633ea629921cfa0f62e49219c2dd166bfdaf690190423e61045db3f78aaf91cc2139a896b2fa61927e3f87886f
SSDEEP

768:cydWkJm/RmaNShSacwV7P2xlGpUPFEraOcw8ipDvNoKiWJTMgL7dU5/ggI4gEu7z:cykaUPFIr8ipTNRing/dS/g0KKZmVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b7c2552da68548fef15a5aee2211c0_JaffaCakes118

Files

16b7c2552da68548fef15a5aee2211c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8679ba38a571586eae265f301b3d1fe4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateHardLinkW
GetCPFileNameFromRegistry
SetFileApisToANSI
IsBadHugeReadPtr
GetConsoleKeyboardLayoutNameW
ZombifyActCtx
lstrcat
GetModuleHandleW
ExitVDM
SetFirmwareEnvironmentVariableW
GetModuleHandleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE