17b621aaa99def5e3f8921af36d79bd6_JaffaCakes118 | Triage

Sharing

General

Target

17b621aaa99def5e3f8921af36d79bd6_JaffaCakes118
Size

545KB
MD5

17b621aaa99def5e3f8921af36d79bd6
SHA1

ff45d19ae19b12a0df5fac91162ce9ff49a1fd97
SHA256

8ac013ae1593a7916460babf9d16cde0a740288a0cc9a664ae0f6ac10bbe07ff
SHA512

c23f9435d83da99ee54e266f96e9a2f393f056c91184bd9dd13fa16dda8fd569004d275e3bd6a4abcb5f20ffe94b62cacd06c2bdadf261ebd9c7306084300574
SSDEEP

12288:VT+D7lj5+T+D7lj5+i+D7ljk6UhGhH8xHv4VI4Vu8xHv4V:F+D7lj5W+D7lj5r+D7ljjUwGv4VI4Vr2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17b621aaa99def5e3f8921af36d79bd6_JaffaCakes118

Files

17b621aaa99def5e3f8921af36d79bd6_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ