17897dd187e3089e239bc409d1391821_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17897dd187e3089e239bc409d1391821_JaffaCakes118
Size

1.5MB
MD5

17897dd187e3089e239bc409d1391821
SHA1

716b18f7f8724d353c1d04e14b26b52d0014bac3
SHA256

b8ef7d2cc156c7d12b82cea04d5a7f5f0e98f341e58487c6bb3331d67d8f3bd2
SHA512

f8893183ac1b98a51aa1b132139880a44c39bd8db56de3a99f40c59c805cbb0a17130884a5c2aee93e472db943e398b61ac2c1311c3f49e6524a06a9d88312fa
SSDEEP

24576:kwKsZtV0vyHsP0rtRvWhWMnzi94ZaqnMueYsRQ1nPUpiZ38JVF3vOoYcU34h:7LDHKwp6Joya1uebRaPNWF/OpcU34h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17897dd187e3089e239bc409d1391821_JaffaCakes118

Files

17897dd187e3089e239bc409d1391821_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.79u$zn
Size: - Virtual size: 831.0MB

.b5fnru
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.phieet
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 698.0MB

.data
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 110B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE