15c5016f064b640f2a5746912107b539_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15c5016f064b640f2a5746912107b539_JaffaCakes118
Size

42KB
MD5

15c5016f064b640f2a5746912107b539
SHA1

e0b118e6aedbdeeeaa88ab2fa8a92a830eb554d8
SHA256

205b59f500f537b33a80b2a52cf0bf1251889e028fb167c2adc01026b65fc8ce
SHA512

360bb270be5ce1a7038ff7b29b220a8ee748c960039137c6c87329182f0b7f6c1a3cfd83e1fa1a7161aa75665100ae0bf883d0b79a0626b6a306684b480275ee
SSDEEP

768:Ls588ypam2HHtI8NMqS/8LzJytc1YRbjG62DYFKtGchzLSRIo7P9yYcpK2:L84pawUS/83Jy6+RuhDYYw26yFp1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c5016f064b640f2a5746912107b539_JaffaCakes118

Files

15c5016f064b640f2a5746912107b539_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ