16ac4c9a2763f8f163e83b582e026378_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ac4c9a2763f8f163e83b582e026378_JaffaCakes118
Size

594KB
MD5

16ac4c9a2763f8f163e83b582e026378
SHA1

fed0805428c58cf1d4e9e737677e1077919c3584
SHA256

b8c21219c2cc15f8ad8442d8ea5459e138a3970d519113c8bddaace8e943b2ed
SHA512

9f2d93c5968e8fbaeea209b0f6173720695110fbf935dbde93cc869aa99412f0f898cee7916090ead1a2bb1e7481fa7d7feb4313a4f2e251159625338f16256a
SSDEEP

12288:goFz/PU3Hoqhiba+J1way1Bl5A56WSEIb:ggbUYqc71w9CS9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ac4c9a2763f8f163e83b582e026378_JaffaCakes118

Files

16ac4c9a2763f8f163e83b582e026378_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 485KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ