17c2c1ac63eb17266fb7b71053cc7341_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c2c1ac63eb17266fb7b71053cc7341_JaffaCakes118
Size

826KB
MD5

17c2c1ac63eb17266fb7b71053cc7341
SHA1

3a2c819fc7049e5ffb3be6db68efb2b52106af86
SHA256

05461de3fe20f686d13147f188cece750c426afa7832b581f3c824064df3b5e5
SHA512

98926fc157ae710fb8113c8e2d72940a00d23f88f3f3e29590356fed36add2ad10042c9c562233aa759e0dca39b6103fe98a4b8b69ce9a96a71c47ff532c109b
SSDEEP

24576:h7v6ZLRi9jXyqrGPIdjUixD0tJsxFVYEC:heCFzKIdvCU30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c2c1ac63eb17266fb7b71053cc7341_JaffaCakes118

Files

17c2c1ac63eb17266fb7b71053cc7341_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE