2c17d8c336f4d15315feb3f46837a6ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c17d8c336f4d15315feb3f46837a6ce_JaffaCakes118
Size

232KB
MD5

2c17d8c336f4d15315feb3f46837a6ce
SHA1

7969a49cf7156889849ee2754b326d45927e1dd7
SHA256

7fa920f0358f0d207654d74668fb6bb0362a9f08ec07f5235f59c60f6c08f13a
SHA512

90197b9165c75bd22ef3cea96e3b3678a5be0a65d6b1e3fbfdd2d73a6f2e66be74b09c85f397bff0c3a6485ad0b07866ed316643f3c33275c84977fe77296002
SSDEEP

6144:NkDAgTmSBCtpRcf/Dcr5LeNGflpiPkBEpaHEo0g:yl3By8HDK5LQGpBi+0g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c17d8c336f4d15315feb3f46837a6ce_JaffaCakes118

Files

2c17d8c336f4d15315feb3f46837a6ce_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cleanmgr.pdb

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE