17ab407c801b016b3a065e530a7b885b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17ab407c801b016b3a065e530a7b885b_JaffaCakes118
Size

56KB
MD5

17ab407c801b016b3a065e530a7b885b
SHA1

9737fc8835374d1116d9922a3d9f230217673b01
SHA256

bc2befbcbfe58da0bc5f7aa1f4d929464a3a91da701a918d71978e0bf49dbf44
SHA512

86355d791250d2654dd27e35722c8f4c125db47367b85db71a03901fe907e00dc812f7fe8a223b8d5b5cc8c8ca8063ffe2214e1db2ba8a6775d1ca4d5128a0bc
SSDEEP

1536:SteLLBhCFQDiKmkMUfdfHvan1BkVz6Op/BE8S/:11hCFQD7LJCQZbFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17ab407c801b016b3a065e530a7b885b_JaffaCakes118

Files

17ab407c801b016b3a065e530a7b885b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bdd64361da449faebcfab7e42cd8855b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComPlusPackageInstallStatus
InitializeCriticalSection
SetConsoleCtrlHandler
QueryDosDeviceW
DeleteFiber
HeapSize
IsBadCodePtr
SetMessageWaitingIndicator
EncodePointer
GetLogicalDriveStringsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE