1817f443fb908dfc577d6b8e94898751_JaffaCakes118 | Triage

Sharing

General

Target

1817f443fb908dfc577d6b8e94898751_JaffaCakes118
Size

413KB
MD5

1817f443fb908dfc577d6b8e94898751
SHA1

3e2ce6c902a8dc31df0a57f40d2f5ef56e7d83c3
SHA256

272e3150fe369f6471755e162cf6404a57ccccbe96a1bdbad7d5650edc5d5107
SHA512

4e572cde3488be6ce22918f4e744a2da7901fc3f783ba6c58fa0c3dc84b7b2af8007dc8e5b38aad66276ef58ef10d3f3e1c669302e3070700b2e2358c9eebc52
SSDEEP

6144:DXkdEVkh8yatiE2MFxcm0hOsSUpuGUe85UnVG/biSfloNDKos0BNTBC8kpOvl:zk+VkeyatieMYXe8FaNGossTE8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1817f443fb908dfc577d6b8e94898751_JaffaCakes118

Files

1817f443fb908dfc577d6b8e94898751_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 32B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ