16ff789614fba953789a5fa7af56c4db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ff789614fba953789a5fa7af56c4db_JaffaCakes118
Size

66KB
MD5

16ff789614fba953789a5fa7af56c4db
SHA1

2931ee624b86164696d79ce736fe2660723b7eb9
SHA256

b7626d2fc8d7983e57f28e24014debd22989ab61f32ba8f167775fcc981ae581
SHA512

92566414a459c43ce2af59cae1f227ddcb39d0d443999e3a812129691dd8d7bc3aa6aec2ca7b1008255a7b0a3bde6fa6a38a58d5ec7035490770138af9407850
SSDEEP

1536:XHzzqIfhbp1pe769U2sNf34zL5vItmdqqy6TXgqhSWlLK33qtL:d9U2Pz9C+qST9ZL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ff789614fba953789a5fa7af56c4db_JaffaCakes118

Files

16ff789614fba953789a5fa7af56c4db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 16.1MB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d...
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ