f17f4befbf4f554d0c8afc64e175d121_JaffaCakes118 | Triage

Sharing

General

Target

f17f4befbf4f554d0c8afc64e175d121_JaffaCakes118
Size

1.2MB
MD5

f17f4befbf4f554d0c8afc64e175d121
SHA1

3e25e6156d9916c35dc59b259b4c840e89c4d7a3
SHA256

2ff32a489e0a1951a581f74097e08e1b6f99a43f4de662b62101d7c3ecc6eab0
SHA512

79f935fe98d22d18f01ab4297e489a623e49547d706fd8dd531846d6f9e86fe63f2b2816265341e96709952176a914926aab2d1af155b8cb6f860ef701a4a54b
SSDEEP

24576:W9W0hphPOHAAlTmdcuYM+WE0ah2KHTmj+aEOzDcHOjMTRRwT:WW6H2HAA5mdcuYM+WElxHTmyEguj2nw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f17f4befbf4f554d0c8afc64e175d121_JaffaCakes118

Files

f17f4befbf4f554d0c8afc64e175d121_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 828KB - Virtual size: 827KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ