17ce36716491b68b979fd91373e33ae2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17ce36716491b68b979fd91373e33ae2_JaffaCakes118
Size

919KB
MD5

17ce36716491b68b979fd91373e33ae2
SHA1

cc0fc7a120af7ebc562d4626ad3f2db2a927a3f8
SHA256

4d22b6ee59c4d7a6a2b666a1aa27eab595c52ab067ccd8965c425b017e564f09
SHA512

caff62a52a3c5fac855c42df5e8746d29f963e0063520794bb62fad097241e9c5e9de7e63cdec180281a603c6362f93175cc4788d167b4a4ed49103c39a4e5d0
SSDEEP

24576:O2chXEgYJoRNNTQQ1ldiVTzqiCZ+8Pg5BJ:O2c4onl5epzqiCRPg5BJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17ce36716491b68b979fd91373e33ae2_JaffaCakes118

Files

17ce36716491b68b979fd91373e33ae2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 369KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ