16f98b0005c73c843e1edcd1a04c5ebb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16f98b0005c73c843e1edcd1a04c5ebb_JaffaCakes118
Size

40KB
MD5

16f98b0005c73c843e1edcd1a04c5ebb
SHA1

06553eab195932523c3a44834c41fede29bab601
SHA256

b40a62d7fbea969127e4b0a2baf1e94f655c1effeb89d4f1a135b074784ea19f
SHA512

52911467b2d156d45e4c09d7ee0a97141302bd87c50c2da7c5b4b253c6d996b1f485ba96a82ad91603c63f51bea1ef4ec36cebf88c0fdf8ace2e01291230bbe5
SSDEEP

768:ybodXomvtes3YwBvZgV/RYqsU77WVHIWicR41HYcYdvS:ysFVtwwBvWhCqswKkJ14cYxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f98b0005c73c843e1edcd1a04c5ebb_JaffaCakes118

Files

16f98b0005c73c843e1edcd1a04c5ebb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

code
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oli
Size: 1B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE