17d1f156b27508b4a2d61f77379341ba_JaffaCakes118 | Triage

Sharing

General

Target

17d1f156b27508b4a2d61f77379341ba_JaffaCakes118
Size

7KB
MD5

17d1f156b27508b4a2d61f77379341ba
SHA1

6d1d6943eb2635d30cf1c3715a29019e3a1b489d
SHA256

c3181b0c92018238e1878020c73f28750fecce8ab9f924ac5386ddabdc85ba34
SHA512

a95a8b99a5ee69240c31bb87f5b2467d4dcd894e9ef2fb4102df7243d2e30a3abcc12ed72deedc973d94d940da12e943adfb3d9c97c19fda5cb85406898edec2
SSDEEP

96:vgQG6kHWjs8F7tMM2IKe5cE2TYlnlYJnLeL0Kff345Civ1r5RXmm6oajF:vZjs8cG+V2nlYJLeLTg4Sn6n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d1f156b27508b4a2d61f77379341ba_JaffaCakes118

Files

17d1f156b27508b4a2d61f77379341ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ