16f2615b07bbda5672f8e775b6cd98a7_JaffaCakes118 | Triage

Sharing

General

Target

16f2615b07bbda5672f8e775b6cd98a7_JaffaCakes118
Size

60KB
MD5

16f2615b07bbda5672f8e775b6cd98a7
SHA1

8cd556c22ea8b01aaf5f56c369c31a54c8de30b9
SHA256

4ba64e89a9f3dfdb5684f3f620688bf598c7b600540b3ce931298a68fb0c04a9
SHA512

c2d85f48d2b3b6510a89c34871fa39167ca2d7f539f10be674e2fe233d205d2812ab12d26b6f1441b8e49f54a4c5e0968b8a23ec226d40f9750dadbe3d20a3c3
SSDEEP

1536:QU9zfmDA+y1liAM3aQP12E+hqOwHojT63p0FV:rzfR+y1IA+V+IOwHlp0FV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f2615b07bbda5672f8e775b6cd98a7_JaffaCakes118

Files

16f2615b07bbda5672f8e775b6cd98a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ