17828c69322754ed8ea77de547f27620_JaffaCakes118 | Triage

Sharing

General

Target

17828c69322754ed8ea77de547f27620_JaffaCakes118
Size

56KB
MD5

17828c69322754ed8ea77de547f27620
SHA1

22f5af391e1a574fffd4320f8aa172a385792f51
SHA256

a5f439ea81794c62d68d993f4241d381d33b0fff9c1fcc5ccab9144c017ce625
SHA512

8be57aa34c27c15c6e73da5fb3a8d03dcf3313e4c1afaff10e71c1177b3a44e807198cd11bd0e78dd1f03f93ce8f08aab629b46b968c5f8d7eb8e01496642448
SSDEEP

768:DSrUPNA7J/U2VnWkWXBjOFnIJWGW774K7BOaYII6I9WHWnFO4b3Z8OqqoL5w0jzp:urUuJxWXBjOFn+o4y7AFOgZkt5wyzp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17828c69322754ed8ea77de547f27620_JaffaCakes118

Files

17828c69322754ed8ea77de547f27620_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE