16a38974d5d74c51fde04359ec09e878_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16a38974d5d74c51fde04359ec09e878_JaffaCakes118
Size

116KB
MD5

16a38974d5d74c51fde04359ec09e878
SHA1

c660115f2aef10ce87c217f2846512f3a2764ed4
SHA256

14de81955c0d61df5746a9311cde92e6335be7562e4014351c04cc310ce9f749
SHA512

7d7491289f86361cd635fd8c0a2e5dcf7140745243847a5609723f6db406ea59800a34728d60d319de8e415a53d813b6b6a4582e37895881c33bba2bcce3e573
SSDEEP

3072:m2cZuNZqfEXgr5bNahAoIGlwxqviWJvfkQAYg6EIOJyY:mkZq84bA9IuGGTvcQHg6EIOJyY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16a38974d5d74c51fde04359ec09e878_JaffaCakes118

Files

16a38974d5d74c51fde04359ec09e878_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_LDATA
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE