17f9ee36320f78be23461b21443224eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17f9ee36320f78be23461b21443224eb_JaffaCakes118
Size

111KB
MD5

17f9ee36320f78be23461b21443224eb
SHA1

e11fc69e0a8f04732165a023797080184e81130d
SHA256

43b40404616ccc85bad14531994ebf6229ce281bf1dfae76805dc75404d5f248
SHA512

cfe3cbece700cedc0ee3f21ceae975e24ea91fb5b6e183b67a183dbf4fbe2d0db427b3c1db3ec69325f5a73e92d6a7127ad3d5ab5d5acb5c4c73cb1f3bb09228
SSDEEP

3072:HP/eRVHmvzk78P6lMQ+h6SBzhpx72LpikJyA:HeB38WXXIX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17f9ee36320f78be23461b21443224eb_JaffaCakes118

Files

17f9ee36320f78be23461b21443224eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 349KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ