a16f2eda35c3bfdcb764d9c43b2e8629_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a16f2eda35c3bfdcb764d9c43b2e8629_JaffaCakes118
Size

132KB
MD5

a16f2eda35c3bfdcb764d9c43b2e8629
SHA1

3e7a723467ca15da48ccd70978f0d073c521db74
SHA256

b425cec9383436f990dc3411cd59261a5898bd3429af2c213f963c5d0660e615
SHA512

9e2cf9955c71019eb3390e970b58dd912592d619a59f1c086f0fdc15088d5a00a898006152c29e0dd7ac206ef595217f0acf50de2d2ff05c0d4444fb4304d3e1
SSDEEP

3072:R/2WK0sXD7mNOk3546sueGd4x+T54h1ertBx2JG:dtUmNOksuBdjuA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a16f2eda35c3bfdcb764d9c43b2e8629_JaffaCakes118

Files

a16f2eda35c3bfdcb764d9c43b2e8629_JaffaCakes118
.dll windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ