16cc02fde923becbd72d05b20f8cb1bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16cc02fde923becbd72d05b20f8cb1bf_JaffaCakes118
Size

2.5MB
MD5

16cc02fde923becbd72d05b20f8cb1bf
SHA1

e0e4bcfd59c3cfbde6b02d8bcb72c5a3d1df4424
SHA256

165c83548149c627b7daa774e63a65700e027916323fa4d823da6e641ff4c5b1
SHA512

97a0e4ec88a941b3f14db5139a334e1a24531c02024c8e630bd3e7f40f9ff4ee49f96aa6826196e818c6708aafb4e416a8f80322c8bc6c83967a9f710a1204db
SSDEEP

24576:VDyTFtjyDyTFtjHDyTFtjODyo1tj1Dyo1tj:6tLtctUtZt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16cc02fde923becbd72d05b20f8cb1bf_JaffaCakes118

Files

16cc02fde923becbd72d05b20f8cb1bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ