e16359b185bd1b9690e85263df5d844a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e16359b185bd1b9690e85263df5d844a_JaffaCakes118
Size

515KB
MD5

e16359b185bd1b9690e85263df5d844a
SHA1

0572eb89d21e88b669bd08a450c6fbd424cfc211
SHA256

a12736bce1d4f2e582404e446f727649f817888092b662afb813c86b17193619
SHA512

7348b33c27360e364cee66c18d617aea546dbba90bbfaaa92d3774d44f908086048c530a980969946fcacb7802d9ac4eb80a5875a056fb351c2eb35a90b52d8b
SSDEEP

12288:tEqRK1XMaLcMJfrc4wFiLowvVm22iIVpybovZJY3Byt:vs18+B7wUt9F2iIVpEovLI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e16359b185bd1b9690e85263df5d844a_JaffaCakes118

Files

e16359b185bd1b9690e85263df5d844a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 767B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ