16a7fb13d6840956094c85b2f98413d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16a7fb13d6840956094c85b2f98413d9_JaffaCakes118
Size

556KB
MD5

16a7fb13d6840956094c85b2f98413d9
SHA1

b4c1fbb0406940df43295045f1b019ec8962009b
SHA256

7dbb66a1d0e86948eded3651f7d5823067c595e003c6e43d3bfbba0a12631ce6
SHA512

bab2e8d974a64d3d310a7ee1d472c966bc9f92f4b6b8e2d36c0d64297ceddb47ec3e6295dc43fc2996892feacc783111b80b87d719565a0afcc182b99301a119
SSDEEP

6144:SiXExn6m2bV91PQJD0FtGgA4vVNSxyJBczJU5SQR0rOk0Xm+qds2Vwu+F7bMtn7D:XUxn6mI91PQV0Sk2yPczJI0OnnpMp/X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16a7fb13d6840956094c85b2f98413d9_JaffaCakes118

Files

16a7fb13d6840956094c85b2f98413d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ