17c105f6a25c1f2bb3bc1763d4659900_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c105f6a25c1f2bb3bc1763d4659900_JaffaCakes118
Size

106KB
MD5

17c105f6a25c1f2bb3bc1763d4659900
SHA1

f33194181a70af43f0ce3e26a6da010625bc4bf6
SHA256

4dfd8c610f617ccdd43d2378f712ad80740b65680f8e717b722f697abeda7b0d
SHA512

7ea2b332fe99b6c42216dfe3c73b6fdd883b4ec1a3fa652d0c583b3fc8fb7e0a4f54b2408ece8431a3a4255692535beb509d142b4f2e3c98017680117bc3abcc
SSDEEP

3072:KWkbRZX0gduI4koFkp+/9abEeyYQy88fz:KbbYgd0ZPct8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c105f6a25c1f2bb3bc1763d4659900_JaffaCakes118

Files

17c105f6a25c1f2bb3bc1763d4659900_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ