16da8f638a355f319197698a629fccbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16da8f638a355f319197698a629fccbe_JaffaCakes118
Size

56KB
MD5

16da8f638a355f319197698a629fccbe
SHA1

0545b59922bb446153665b11cf7d507fa57fe21a
SHA256

a743b2ae60d09b8b204aeb3e0a1b510c1ea3444a75268bdef1bd6592f0fdc2bc
SHA512

c37f056cdef08f972d6b1b25752167ca91021b5abbbf70775a4aab4e71fee40ebb1fb0bc50b2a7aa549dd4754e9da2c478abd8dac323a3a27499994feede31b4
SSDEEP

1536:aH0zCqCIdQ7OS6X53HA9npwyyH2vzB+RrwyBOTxwJPF/4y1U7f:xLQqS6J3H0wyi20yyiMmb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16da8f638a355f319197698a629fccbe_JaffaCakes118

Files

16da8f638a355f319197698a629fccbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

949d9e7a532b8fb72c8448f00df7d759

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointA
GetCompressedFileSizeW
GlobalAddAtomW
GetComPlusPackageInstallStatus
GetSystemPowerStatus
WriteFileEx
GetLargestConsoleWindowSize
GetDiskFreeSpaceExA
EscapeCommFunction
CompareStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE