16be8cbe8cb190b4edee43c8909142b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16be8cbe8cb190b4edee43c8909142b4_JaffaCakes118
Size

904KB
MD5

16be8cbe8cb190b4edee43c8909142b4
SHA1

fd2a5bca457948467d5c5f96350abcea1623b94f
SHA256

d02eac6f101ca0c1b4cd08628d812d9f5ef57328496f5f24faffdf358633d4fe
SHA512

12549ee9656b64ea318ed8f391259791a1a1f89ba29ba132827ea1f76dd18e4926305600067282947365d797c1ada5e7e8724ef7b311ea678984950bfe43dfc9
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqC:hWtTBdsqEPxjjoFzA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16be8cbe8cb190b4edee43c8909142b4_JaffaCakes118

Files

16be8cbe8cb190b4edee43c8909142b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ