17bb2316b2a7158fc844bae753cf26e7_JaffaCakes118 | Triage

Sharing

General

Target

17bb2316b2a7158fc844bae753cf26e7_JaffaCakes118
Size

160KB
MD5

17bb2316b2a7158fc844bae753cf26e7
SHA1

b70a50776477112f4df2e2f3f7a6ba04abc5a6c4
SHA256

66a8a20b34c4e866d537c1626e5a60b6415dd959fd0a39d9e1b91e5b31eb1904
SHA512

77195f27462aae13ebc7069de36050abb72b4325113a85abb0ab21bc9b17c0220473fd3041b35a4cbe445691df6414020f3f7c9e328b4eaa7216d1154f6a4c86
SSDEEP

3072:OzQmrB+HeW8dLV05YUg4/T5p7Org0aVOWkF:OzQ0++iXgAmrg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17bb2316b2a7158fc844bae753cf26e7_JaffaCakes118

Files

17bb2316b2a7158fc844bae753cf26e7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4cf5a46a4f296cecabe2e6017525b113

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\funbox\FunBoxPlayer\Binary\ReleaseL\FBMP_HUN.pdb

Imports

mfc71lu

ord1093
ord371
ord1168
ord762
ord1079

mslur71

_onexit
__dllonexit
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
__security_error_handler
memset
_except_handler3
free

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ