16c01ed329d12f5e68280ec53a12dd3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16c01ed329d12f5e68280ec53a12dd3a_JaffaCakes118
Size

15.9MB
MD5

16c01ed329d12f5e68280ec53a12dd3a
SHA1

70097c1f4e9cf932239d29b8c58bb0267a4a60cb
SHA256

62a2b68a8bcd7ee61314a0b91080b474efff27b8b427fa89f6daaa6a686422aa
SHA512

1471f79df3a8d5557eed62ab2fc1672fc84a22f95e6d5a3b666717d73640bc5144a666d74fac51e50529be4cdcba49696df0961ac117f9ba5a8735e42a73467e
SSDEEP

393216:Vg7u7g7u7g7u7g7u7g7u7g7u7g7u7g7uN:eSMSMSMSMSMSMSMSN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16c01ed329d12f5e68280ec53a12dd3a_JaffaCakes118

Files

16c01ed329d12f5e68280ec53a12dd3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ