17c692a1cdef37184c40d82cdcfbb941_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c692a1cdef37184c40d82cdcfbb941_JaffaCakes118
Size

943KB
MD5

17c692a1cdef37184c40d82cdcfbb941
SHA1

d6816bf855798dc1b2383d7780a9cb82f3a5c120
SHA256

7cc3dc6dc338230e449bb6cdf424f05e676fe82934ea0342d8eefa5424844498
SHA512

45da4e9c442e14ea52922c23ce541d3a94af180806ceed6bf181fab3f8f654261495e9e570d4c220e035e35305fa132339bf30688d3adc7444063d3982533367
SSDEEP

24576:cHDJe62cNjs4EHMjbqckby28vDKpYROnIcQKv/AMVN:QU+slobU3/5TQchVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c692a1cdef37184c40d82cdcfbb941_JaffaCakes118

Files

17c692a1cdef37184c40d82cdcfbb941_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CYC0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CYC1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 916KB - Virtual size: 915KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ