17e934abd72c392b77dd49570c38c696_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17e934abd72c392b77dd49570c38c696_JaffaCakes118
Size

318KB
MD5

17e934abd72c392b77dd49570c38c696
SHA1

e8eb58141b387de36823aafd0fe59f08eff06634
SHA256

b18877fafc8902bad912778ff92bda81b14f6973828d732f54f6cadaa14b4580
SHA512

715c1414ba445914e4aaed8e2cad8e16612abdadc095be7f1f6ce7287bf765ea4e7eaee35852be909e567999ed5171a5cebe3be61cdf2b229fd5f653ad878fd5
SSDEEP

6144:9nDw2F4EwuVmLsywFdxNB4z7CMtqoTgxX0B8msdoFDECFFgPYX:9rLULsxZB43CMtqoTlymkoFDEygPi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17e934abd72c392b77dd49570c38c696_JaffaCakes118

Files

17e934abd72c392b77dd49570c38c696_JaffaCakes118
.exe windows:3 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE