16f9ca27c6eaa75a63706b4b5c427b25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16f9ca27c6eaa75a63706b4b5c427b25_JaffaCakes118
Size

357KB
MD5

16f9ca27c6eaa75a63706b4b5c427b25
SHA1

e5ea656da70707b366cccbf6ca29c9846ee0c839
SHA256

38262a510dc072a214fe822162da831fed91ff89a4b302d0953e4153f0e00b10
SHA512

090aed86f68065a48eb89a949b0e5e3ef1b6f4e57cf188165ede0c227a2d9378dc5eace13e692e89056fd1367414c5e2d56f6f0956baac813fee6fe0735a3455
SSDEEP

6144:wSUHzY4YRzx6/YE0dHfz5vIS8AM2g9FFp:wSUHs42x6AEGHf9J+2g9F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f9ca27c6eaa75a63706b4b5c427b25_JaffaCakes118

Files

16f9ca27c6eaa75a63706b4b5c427b25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ