16e389b7d42bb2f27b3557ce239b2b05_JaffaCakes118 | Triage

Sharing

General

Target

16e389b7d42bb2f27b3557ce239b2b05_JaffaCakes118
Size

232KB
MD5

16e389b7d42bb2f27b3557ce239b2b05
SHA1

e2b8ef30500cf2eebe40722505b064bfaeff30c6
SHA256

43982dc36ecd8d6b8f816dde8bf64e7fe49990aa344165d28c847b8c95b8bc43
SHA512

ed03327d17feb3aa7c77469f27b06001c0ce85111e819f0d318b048a77428c098bf1cf778aa7683e9b417f0de77165f355cbc880edcaf3d411775a9ace07ff7b
SSDEEP

6144:adSYnWIZFso+0QsQNwtcje5aLWJm/u0A74MjC:gSYWI3so+dsQ+yLW8/uND2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16e389b7d42bb2f27b3557ce239b2b05_JaffaCakes118

Files

16e389b7d42bb2f27b3557ce239b2b05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 369B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.r1loc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ