16ef71cffccfd4f084e395cbfb38cacc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ef71cffccfd4f084e395cbfb38cacc_JaffaCakes118
Size

200KB
MD5

16ef71cffccfd4f084e395cbfb38cacc
SHA1

0641d6b4748aa1b4f2f6355a85b5366f6f0b7c70
SHA256

a619b7d1df5e6c35458813379be363c02c70facab450f6ffc1ff55a6cca10d8c
SHA512

14da393f50d7ae428b493b9d9b6f45356e65264f466cd91024c46538561972792de741bcf9a5784952d5fc7502e195cac367e674821d0f7940355434df26ea3d
SSDEEP

3072:NBp6rhbsF0MuXKPrm3nWruMPdZ7uI+C8Ye7DPekcbC0YT3vq0yuG/:QrhoOMXwjkpuIkOg3y//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ef71cffccfd4f084e395cbfb38cacc_JaffaCakes118

Files

16ef71cffccfd4f084e395cbfb38cacc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ