16404fd8101139a25854704e82e4f30e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16404fd8101139a25854704e82e4f30e_JaffaCakes118
Size

305KB
MD5

16404fd8101139a25854704e82e4f30e
SHA1

5a650aec37d264a3241ff03bebfe751a3a79ab3c
SHA256

40e1c6ceeec923b3d1bf212aa81d2a15240f0f5082557267c9593ce9eb89d5d4
SHA512

0e2b843a4ca451d74c03fb49eba850b7c6ea4c08b54bf94fa9203db0a825ab51aa1ad9b89b821c9f9226c7248a556cab749c873c1704ca9e4edf720ed4d8e695
SSDEEP

6144:5GSzTT72Y0S+zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOQPECYeixlYGicm:5GqX7SSpYsY1UMqMZJYSN7wbstOQ8fvg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16404fd8101139a25854704e82e4f30e_JaffaCakes118

Files

16404fd8101139a25854704e82e4f30e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE