17dd29cf25b575a9dca5dd55d98c157d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17dd29cf25b575a9dca5dd55d98c157d_JaffaCakes118
Size

128KB
MD5

17dd29cf25b575a9dca5dd55d98c157d
SHA1

2cc3fe057d6fc3b3de81c76756e4f869c9e314d0
SHA256

83d6cfa94e59905993761e400de21dac6ce4b3625e76e585726ecea3beb6dbb1
SHA512

9f32eabba9bcea9daf757ddc80997884be5d267c8007b729f60460bfd92e884fd26a05b72a0fb1b73e472e063f3cf42072ac80544995c63473c593f7c39de4f4
SSDEEP

1536:Z0bqqgvGQy2BPLEvA74HGfMKtDiyXcTtTUNk/1xzAP:Vel2BPLEvRHqMsiySTU0zAP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17dd29cf25b575a9dca5dd55d98c157d_JaffaCakes118

Files

17dd29cf25b575a9dca5dd55d98c157d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 71KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ