16a90f132eeda79b3e87455319df08c5_JaffaCakes118 | Triage

Sharing

General

Target

16a90f132eeda79b3e87455319df08c5_JaffaCakes118
Size

421KB
MD5

16a90f132eeda79b3e87455319df08c5
SHA1

035fda56089b50322a7bc49196661237a6ffb3d0
SHA256

56ce8c1e6b4e612de21ade0676775f37f7a8154084e872dbf42b694b9107d453
SHA512

4bd4e1656bf44d6479d7235e0ca42211edc29cc42706893a0e609b1ff17e48eef4cfd059a4cd483cbe3cc1a5835310dd9cff0198802bc67eaf655f561cba68c9
SSDEEP

12288:ysHIB7QkKRaug8yeikCykaAOl13l0Pz8MBqI:ysHU7+h5yeilykkln0PzZBqI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16a90f132eeda79b3e87455319df08c5_JaffaCakes118

Files

16a90f132eeda79b3e87455319df08c5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ