170fd7f939fd4980bd58aa5f9750c9e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

170fd7f939fd4980bd58aa5f9750c9e1_JaffaCakes118
Size

348KB
MD5

170fd7f939fd4980bd58aa5f9750c9e1
SHA1

ef382e5dc53bcf1d9616b1cb3ab223071da8fe60
SHA256

7df2c2878dc6d025521a198f513c865fd96dd57a58267db31d5dea234c4303da
SHA512

fd8a267e7e05bb9143419072fa2c383bd4340ca37b9fcda91c0e0365948017b19817b4e5e6fb0a0c0f04dda0c45eb363cc9a9491d53a32f1ddd4a037127186b5
SSDEEP

6144:eG6cPpODxCdS7eOUQ41B3x8YdlFC3otpXK5iXSJLYaYTvCV+CmdP8HKKXK5G9Xy:3VcC7pK52BTvCVauHXK5GI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
170fd7f939fd4980bd58aa5f9750c9e1_JaffaCakes118

Files

170fd7f939fd4980bd58aa5f9750c9e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 363KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 800B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ