17da23695227382c2d1401b941723f0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17da23695227382c2d1401b941723f0e_JaffaCakes118
Size

130KB
MD5

17da23695227382c2d1401b941723f0e
SHA1

6e5e115c146da464f6b6a6024838dc24d9d9c05b
SHA256

e537c6516692fddac8a2c89f35f30b6dd069f301f98c61320d5e458625f656a2
SHA512

0e2bf157ee4760b73c82ad2f1c5bb54e429a57a907124a442820ae2d6eb0ba331f93b0be896b5a9ac00d88f376eabb6ccba0408312d5304f8e4f3718c38aaa36
SSDEEP

3072:SIUMNrQaqiyeQEaAC9s/SqJtMrytb5l8iiyV7/t0FW6YM:7lZqfJL9KdQqFUY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17da23695227382c2d1401b941723f0e_JaffaCakes118

Files

17da23695227382c2d1401b941723f0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

mh
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

frp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE