17f018611e5831836ad07da2f414a917_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17f018611e5831836ad07da2f414a917_JaffaCakes118
Size

724KB
MD5

17f018611e5831836ad07da2f414a917
SHA1

50de5f69ea232b9e7c670f088d14e5bb88da7d17
SHA256

7e2aef03c8e7d270358c5307cc32a16f53dbc9ade92cf9c698184519a56045d6
SHA512

6295193f6b615d9102bf46298b2c132280c87c8ff5051f5c4ef1afa963f2a071d23022914f8a10c737b6dd241eb51d93e9eb49d656659f0ab50db91534d65118
SSDEEP

12288:orXfQQzNYsE3kWijW8iheB7Bdcy70b4v7pP/aCk7SoAXTShk:gXYQzNjMAIW7BH3aCkqXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17f018611e5831836ad07da2f414a917_JaffaCakes118

Files

17f018611e5831836ad07da2f414a917_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

MsSiConvert
ssDecode2K
ssEncode2K

Sections

CODE
Size: 245KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 431KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE