17c26f3e39290793c525176539930e31_JaffaCakes118 | Triage

Sharing

General

Target

17c26f3e39290793c525176539930e31_JaffaCakes118
Size

235KB
MD5

17c26f3e39290793c525176539930e31
SHA1

0e3246cdddc4731104d1f33954c225804b30c7a6
SHA256

d763bc539b3cecd51c5fede755c71c42f34382712636d63d5f4a1a6da170b2c7
SHA512

51025d7ac538a2b287826754bf6645887c37a8f7973f9e00aeed9d6bb1c222eef506f95f5bbf078a52247ac1384b7aeadde9d3c6a788cdc1e779a5391db76262
SSDEEP

6144:+iYQWAepNcMQsFTxgLo2MIIxg8d7PuOtc43l:bS7NcMQyTqUhlg4COhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c26f3e39290793c525176539930e31_JaffaCakes118

Files

17c26f3e39290793c525176539930e31_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\wizvighaeExecTareSurf{\alNoonummMolljaweSurf{\zinPudslornontoyebayrocssopowed\lolegulumybegarvacbeRitzahszaed\GnusasmoMinejawsEwersoxzahszaed.pdb

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.psikif
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tide
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Much
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ