16be8301690200277307b11870b64e10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16be8301690200277307b11870b64e10_JaffaCakes118
Size

56KB
MD5

16be8301690200277307b11870b64e10
SHA1

cf21ae792ed1aeb2ddb24e1275610968286dc326
SHA256

6e294046d073f532b1c31abd248313949863f75d08d82ebf606da82dd6c7d166
SHA512

4812c07add65018f490ce692e9b0ac0654376c35af884f216a86a4802e1bb6f9c8211c2c8ef8a2aab0c31fcc8a3447e5b8a623312183322f395ff8b7a2d5b10d
SSDEEP

768:JvjimXGQPNrHmUpARBBCzej0XFZbscB+GdrjAehk5TljT8SkxqlSsz:JWeHPNTPpm2ej01Z/+Ghbehjw0l1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16be8301690200277307b11870b64e10_JaffaCakes118

Files

16be8301690200277307b11870b64e10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

014f65d9b65c5219395f6fe276e518b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ