17d87041b0a2f51a7e3b1c0d46931e85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17d87041b0a2f51a7e3b1c0d46931e85_JaffaCakes118
Size

261KB
MD5

17d87041b0a2f51a7e3b1c0d46931e85
SHA1

d956db3b01c5f38c7e7097c274735b2655048783
SHA256

d221ea0fe2c6f6d87e810138ea506a933d98ee5b95e50ba7bcd0684b1066fce1
SHA512

8157ffa32b9ba0b94e18f29d4899fba35002c5b8679e8f6c7edd5bedbbe0006d640fa2e402300543d385a4dbdc1e33cb6ddcb2a3ba408b5e6cfed96b475f0754
SSDEEP

6144:cl4K8JrCObhE5DmCyuYIKBzr502muGjYbQ+:clb8J05Dz8LWjY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d87041b0a2f51a7e3b1c0d46931e85_JaffaCakes118

Files

17d87041b0a2f51a7e3b1c0d46931e85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.datatxt
Size: 8KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 387KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdsec
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ