16e76fc1787786a2744de05d78251141_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16e76fc1787786a2744de05d78251141_JaffaCakes118
Size

70KB
MD5

16e76fc1787786a2744de05d78251141
SHA1

aeaa71363df99d2c06250a687d7ce3f8dad22db4
SHA256

c424e575fe29882105618491ea45ab0bd5c9249a54119b5db508a2eec363e83e
SHA512

3733844f6ece3ebf6e98ac28e023980c8401d2b721af588b68f5ec9e9a5927fd6d5130b1d637e7964c07954bc1e7cc6564bbad1178fbc7b19f03e3b0dcd51d44
SSDEEP

1536:zVO4rBBKUJ8k9px3rVrNyvg9ZPc1qBc7+C0V4kiq:ZBSiv3rVrNyvgT0mc7+CKDiq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16e76fc1787786a2744de05d78251141_JaffaCakes118

Files

16e76fc1787786a2744de05d78251141_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ