16561211fce3b1663b4a0b6a528bcc85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16561211fce3b1663b4a0b6a528bcc85_JaffaCakes118
Size

376KB
MD5

16561211fce3b1663b4a0b6a528bcc85
SHA1

3b76c1e93a7a0e6a240b7d1915897a0ab14287ac
SHA256

e459a6bde289da65e951fbd0cd6fd29014d080b9e502f89f67f27513fe236dee
SHA512

ca0c3a8b10bf76be1d6638a63c4231875510f8d66adbc807e80f23b0b76ef5483a40bed3cc67a03c850b18b97977d300c33db33d9483da6abc1c94905f992b86
SSDEEP

6144:zIHYsZbS31zXqSNQgeiOKnDYVH0pwpMWEmpRBJ1NuUBY+f7zAF11whggaoHofphZ:zIVZel6SOgeiOKEVH0ppWfBJ7XBczmRq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16561211fce3b1663b4a0b6a528bcc85_JaffaCakes118

Files

16561211fce3b1663b4a0b6a528bcc85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 948KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ