17a90d3960b59dbd86ebe7f43df731f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a90d3960b59dbd86ebe7f43df731f9_JaffaCakes118
Size

370KB
MD5

17a90d3960b59dbd86ebe7f43df731f9
SHA1

38cf557d515f4f79895cb797a25ae9c2758af7bb
SHA256

32727ef0eb2de44748a2661496eb9730758cb53f2a6fc0a97fc05198499faa68
SHA512

9fe309e1ebbe8b8ed7cbf041e1bc43517772cb1d67bd9a90fa5933f45e03b6e01de4bf138ec2445f6ebb5ea609f32426c25f863978027f0613525a719639255a
SSDEEP

6144:NMlrvoKC/Pr+AhCASlOiymaFJij1TsLN7niHjyMkrCgyW0YPNKKoJobj0e:NMfC/PKAZTChS70jyMkOgHlKKkRe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a90d3960b59dbd86ebe7f43df731f9_JaffaCakes118

Files

17a90d3960b59dbd86ebe7f43df731f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Work\Source\Kies\2.0\Branch\2.0.2.11077\source\KiesSilentUpdateAgent\Release\KiesSilentUpdateAgent.pdb

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE