171dadeeaa68681aba58f579f8fb5d35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171dadeeaa68681aba58f579f8fb5d35_JaffaCakes118
Size

484KB
MD5

171dadeeaa68681aba58f579f8fb5d35
SHA1

67333a7a4ff6b19e932078c27891ea34edb56b0a
SHA256

db5c515d34173023f60be9c5f1fea7797062ca88e85346d0b53c541cccc18b90
SHA512

da98898b33a24a53ff9c59223117a8dcd4d3e9700abc12879102f1eb34792ab05a33f9d98aa380983e4a1eed157946d951bdd07a9018a50263264fcf5ce03b4e
SSDEEP

12288:tgTXx7RsfhF36kro8WjrIwLI9FsnEpRpZOPBQ6+e:t2x7ROPVUBUAnEDpZGGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171dadeeaa68681aba58f579f8fb5d35_JaffaCakes118

Files

171dadeeaa68681aba58f579f8fb5d35_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 467KB - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ