00e16f1d93e685ca0787af42dc7fd962_JaffaCakes118 | Triage

Sharing

General

Target

00e16f1d93e685ca0787af42dc7fd962_JaffaCakes118
Size

132KB
MD5

00e16f1d93e685ca0787af42dc7fd962
SHA1

17435fe04b905408cde9cb704711b774f40fffab
SHA256

097a6b7edda53fc12366c82618f0e0c4139001aa70af95d4f58e1df6d4f2f65b
SHA512

ec032a8f5b05f0030c0b9b898c3f3fdb091e52775bae7b39603a66e9a2c1da022798c2143d5cb1e6826bea6f36224147f839a653971968841151c0ea8a5892e6
SSDEEP

3072:1xTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvscwg8R6joB:v2pdqfv2IPOGfXf5ovWv7OR6q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e16f1d93e685ca0787af42dc7fd962_JaffaCakes118

Files

00e16f1d93e685ca0787af42dc7fd962_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ