16ebc839098de4eb6661e42a670c7f37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ebc839098de4eb6661e42a670c7f37_JaffaCakes118
Size

101KB
MD5

16ebc839098de4eb6661e42a670c7f37
SHA1

cfe1a82c0e8781497d3b3635dfaf1d3567d9c367
SHA256

ddbf319f69f6e0311b756e77698be5bddd3e9f81af70adb7a204abc8f1eb65b3
SHA512

a54f046910be5e0e25135f2721b3e1e28d23880288d61c5d14faabbb19ff2f17ebd68bc26cd166fe39fc2c57ff1ea3ab1c71db03d0727aa780d5ee9e4075f940
SSDEEP

1536:YwP1pAlONgkcxYFDTQKxkHZjoEeMIfvHpHxvClNNiwR3vUECl1gmm5drlG6q6:Y2pOWX3Q8qxmhHtki+3vCrg1plG6q6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ebc839098de4eb6661e42a670c7f37_JaffaCakes118

Files

16ebc839098de4eb6661e42a670c7f37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ