16fa40b1507fd8f83586206044f63803_JaffaCakes118 | Triage

Sharing

General

Target

16fa40b1507fd8f83586206044f63803_JaffaCakes118
Size

155KB
MD5

16fa40b1507fd8f83586206044f63803
SHA1

e4c3453d306e0acb722cd83fb6a9ad05e04bddca
SHA256

a868bdc324d0120c0394047dfaa1cf2c32f7f285cb6f2989344f5ecc8f750d6f
SHA512

886eadd424e19216b92d559f4acf03be4b33744f0a8f5a87053d55e4ec7417c226f1b8257f9ce58432bdc0df3e91688a8610ae9b405c86541e48bbb353d0b2bf
SSDEEP

1536:kw98tbRu7KzP0koYNh1TuU0jwNLQOYMNrIIbBVsPd53qCFV:kw8bgKZh1JN1t3sPnqC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16fa40b1507fd8f83586206044f63803_JaffaCakes118

Files

16fa40b1507fd8f83586206044f63803_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE