17131e496cd7d7422b0f9e33d4cc04b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17131e496cd7d7422b0f9e33d4cc04b7_JaffaCakes118
Size

307KB
MD5

17131e496cd7d7422b0f9e33d4cc04b7
SHA1

efe37198e383e72ac899cd52fe6aa8a662021c57
SHA256

a215a64829d4004206de8cdcdfc81df1633e8e542a6769ef3ada9a86460e574e
SHA512

5618a1ea9e36adcb7807c4de2726a64ed7d6ef7162074b46af516c2ab2cbdd1a8deb8eed06b6080e0264528e977eec03edc0801ee677bb2d9be39c73c01f91e6
SSDEEP

6144:MWkcA5p0G9QLPxZzWwW4UZTLRLTxlIHYj2TKecaG5SqhmMmBZ:UcA5W0a7XVkj+HYjz6UEMmP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17131e496cd7d7422b0f9e33d4cc04b7_JaffaCakes118

Files

17131e496cd7d7422b0f9e33d4cc04b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ