a16d720b640a9f39a09fab3a53057fa7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a16d720b640a9f39a09fab3a53057fa7_JaffaCakes118
Size

314KB
MD5

a16d720b640a9f39a09fab3a53057fa7
SHA1

822e8c0a338d0790860a2764a5f1c1252d8bf1a9
SHA256

ce621d807b0b074c73a38f925002c247eb4b7116a9c9104ea2bbbf26f3f2565c
SHA512

4693530e32d32339965e4998b30d8e991025ee157f780d485d6cc9d351f6a0ebcfd242b5f82e54092b5e1c799ff00950aeef1cb9b4d2f096bc4f662f78bf5f94
SSDEEP

6144:s+jeXQTnj8aIGhS/BBjDn2OyzekDHlUF1TRVmwrPMc00TikLbNDq8f7XbCyr:djtn3SDpMeKCVvMc3Tiyb48fv7r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a16d720b640a9f39a09fab3a53057fa7_JaffaCakes118

Files

a16d720b640a9f39a09fab3a53057fa7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 816KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 308KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ