16d81ea3763dc12bfcd7bf04e18a8b19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16d81ea3763dc12bfcd7bf04e18a8b19_JaffaCakes118
Size

208KB
MD5

16d81ea3763dc12bfcd7bf04e18a8b19
SHA1

79d94d0b79384d513c19135176c78c21d7edb383
SHA256

f7e84de7cdc027190455a1ef023fe0b05e6caff8c06761c91feed7108e35c2c6
SHA512

552c2f461659529270cc9d084592d5b8b0e1332d98d4b00e86839c2e9a90b000557fca22f03ea6ba5a0208d1476ad2cd1c1dcbe1043efc058a63ecc24e94fc28
SSDEEP

1536:RebJpLgCcnicxGlt4QYLU9KD02BBAbKwaPoYkwA4dt:RePgCctxGv4QcU9KQ2BBA2waPxLt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16d81ea3763dc12bfcd7bf04e18a8b19_JaffaCakes118

Files

16d81ea3763dc12bfcd7bf04e18a8b19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

crtxgpw
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hgesqeb
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xislbnu
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qxznnif
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE