16ea2a4f64ff1302dd0da2b5efad2f82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ea2a4f64ff1302dd0da2b5efad2f82_JaffaCakes118
Size

414KB
MD5

16ea2a4f64ff1302dd0da2b5efad2f82
SHA1

f61a65362a77c49cf7450e030d9a41deb286f30a
SHA256

c0b9b02e13493bc8fe3f162ee5e80a37c5f82dd16e2d28f9b44a2acd44b498fd
SHA512

a3d3e9fd0222680a4315dc19a7e5f4640a45f1934ee79eea6dc5d6e351e610995db351c74a94df6894dd7c0c19992b367853304b834d9edf4dd2c135b75cabbc
SSDEEP

6144:TVFv+n4MmPqyU3yT6sRghOIy/4ukMIijzvZ3C7r6V6V+42kjtUHExV2:TVFlrT6snqijzvkH6V6V2kx2m2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ea2a4f64ff1302dd0da2b5efad2f82_JaffaCakes118

Files

16ea2a4f64ff1302dd0da2b5efad2f82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5265396cce55c7fc139786d860943929

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
GetProcAddress
ExitProcess
TerminateProcess
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ