16b0090cfa6c5988df12502388b8d628_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16b0090cfa6c5988df12502388b8d628_JaffaCakes118
Size

95KB
MD5

16b0090cfa6c5988df12502388b8d628
SHA1

153ba3d8bb2412b4196e3b6e3c029c63f37c965d
SHA256

0b95302f1f941e4b1e1aca3a9e911931b9349bebb09c91fa3368f1de36c7fbbe
SHA512

5c9916ba66759dc099e69814a1339602c2a899795da7ff9aaa34a0ff6915a9976289bc260f48e86c2c9ef30ee4ec977b967b6f10a219d8fe49097a8e116328c4
SSDEEP

1536:fZfQAm/nNfG5EoQ1rAbHwIUul9+hbdqQWYAxDtV249wUn5:xI1/gIAgC+hbBWYE5V2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b0090cfa6c5988df12502388b8d628_JaffaCakes118

Files

16b0090cfa6c5988df12502388b8d628_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ