c916565a32d3b369927143c7716eea6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c916565a32d3b369927143c7716eea6d_JaffaCakes118
Size

1.3MB
MD5

c916565a32d3b369927143c7716eea6d
SHA1

11e6cd0fd64e7a4d77837ac1e1795a7b4aaa3c38
SHA256

0bdc261d2cb6b22b6da583c51b94f987af00395aa625b229a11114c6e87bc8ca
SHA512

9b6a34ca464098547988992c24b01327953187a7ba9fb1f6e8603ed5149162cdda33659f5a117128ca466350077db1a0923a387cd78e48799f32d968e541ed05
SSDEEP

12288:CFvYW1FcaFyFzK8OuQLw98OhQ3Bgn49mz3PvxB2ocEi0/3IWV//wci3r5xU9bagQ:CFvYW1FcaX7OhQxgjv/w5xUokvAxDZM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c916565a32d3b369927143c7716eea6d_JaffaCakes118

Files

c916565a32d3b369927143c7716eea6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE