17bb80ba62271c63d50a481d44a77032_JaffaCakes118 | Triage

Sharing

General

Target

17bb80ba62271c63d50a481d44a77032_JaffaCakes118
Size

461KB
MD5

17bb80ba62271c63d50a481d44a77032
SHA1

3fea00314e872e3e745aa59ca3a292f3906b9231
SHA256

95212c99c4e3ad9c5ffd7633883dac1462e3f0b9293b071fe1e230abea66c393
SHA512

3ae661aaf758fc8fcf2e733056fe646be730498f13f0f952f845febcdc2b7adc39fdc9f88c65a39a92dfea924b7884796ae25aceff497d2d1e3e0b27dbef5580
SSDEEP

12288:lOJ1e64eTRka76b124J1zaNUfD5ZRjgcPAHVbDtvTnv9kTpyKQB1sjeRcv5zS0wt:gy6zRka76h24J1zGaTkcPAHVbDtvTnvb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17bb80ba62271c63d50a481d44a77032_JaffaCakes118

Files

17bb80ba62271c63d50a481d44a77032_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ