15d5f8ac9dc07cfd4668d965032e7635_JaffaCakes118 | Triage

Sharing

General

Target

15d5f8ac9dc07cfd4668d965032e7635_JaffaCakes118
Size

196KB
MD5

15d5f8ac9dc07cfd4668d965032e7635
SHA1

3a9a102be88c335c116ad5923aa91ef1075c20b3
SHA256

063348fd81000dbfdf8ee7fdf487c5761dc9e02a56a5a6326e86705fc2146476
SHA512

190cdaa28b296adda9681ce48c670f9c38bafbd31110e5da91b7fdc2784802bb74711a97769afbacfef722eb415f7fa72ef6fe01cf9998dcce7c14886c479812
SSDEEP

3072:TWLVioyHW4nDbfagCqKZk5yY/q58yN9dIs1sH62gDQjIyPsXWCUt:SLwoyHW4nDWgRAkPq58ynjuH6qUGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15d5f8ac9dc07cfd4668d965032e7635_JaffaCakes118

Files

15d5f8ac9dc07cfd4668d965032e7635_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE