171e74163015a306826d8b05b907ee4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171e74163015a306826d8b05b907ee4a_JaffaCakes118
Size

97KB
MD5

171e74163015a306826d8b05b907ee4a
SHA1

b3ca6913569b518f0def67ef56889ff95218d665
SHA256

56f3ffd9ba9327f410c971f76df76082475719dbcc823e18d6734eb48e2a3574
SHA512

b31a484ff1af03deb80c5b596aa9f84292beabb1eab42812987ed11a9468b1d624101f0fc51df4f3c8bd7007deb39aa316106052041f2c41bd2249a1ca973b9a
SSDEEP

1536:KUM28v/OL6Jiul9d1tD7M7kXSRz+WXtk9A9QHGlTShmB9R1XCUlMuE:Zs+L6Ji81tD47kCRn69A9Q6tCM0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171e74163015a306826d8b05b907ee4a_JaffaCakes118

Files

171e74163015a306826d8b05b907ee4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ