17978bf5c97eb9e3457dfffd903ca853_JaffaCakes118 | Triage

Sharing

General

Target

17978bf5c97eb9e3457dfffd903ca853_JaffaCakes118
Size

266KB
MD5

17978bf5c97eb9e3457dfffd903ca853
SHA1

d600659d969fa9f5693d483f73174878b01a6bbe
SHA256

1a934b461b5c40172958415928b23ae6b75bf194ecb1927ce09c30b765f09d92
SHA512

942be86effeb062fd7383386f53a0e99fe94b27fa49241396e4745a1cd7de46c4fcb3ac7311c1a80f8d8c56e7bb05b8a7351bb32307542886e9b605b2a701f11
SSDEEP

6144:kxrEmcTGAdTulF59LooSF/0VqsInWYINgpUgdFY:tsFF59L1SF/WqjxpU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17978bf5c97eb9e3457dfffd903ca853_JaffaCakes118

Files

17978bf5c97eb9e3457dfffd903ca853_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a7803027531302026dedc7b5f6025f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE