17e32cd10457de8505ab45ea1c6f7a42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17e32cd10457de8505ab45ea1c6f7a42_JaffaCakes118
Size

24KB
MD5

17e32cd10457de8505ab45ea1c6f7a42
SHA1

6b2b05c02fa9de3746eb43d12a2944bf0ecebb9a
SHA256

d116ab8999362c59ee26c38fc3a08b6e4220b6ef7646ab470dc722f1a3824685
SHA512

83730da5fe7092d7fefcc063f0a4667f46d9d51a9fc94e3b4150b3fd8511b25099b384aa2f225e2b6d55c6188adc79993ebfbbb68bb1810bc025f330abcbcbcb
SSDEEP

384:yfN8Fm5ThzximyK5rfN8Fm5ThzximyK5rfN8Fm5ThzximyK5C:g8gh8gh8gC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17e32cd10457de8505ab45ea1c6f7a42_JaffaCakes118

Files

17e32cd10457de8505ab45ea1c6f7a42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5a92a3a5acb6dd81e277828251e9c7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DlgDirListA
DrawTextExA
EnumPropsA
GetCapture
GetCursorInfo
FindWindowA
GetInputState

kernel32

EnumCalendarInfoA
ExitVDM
FormatMessageA
GetAtomNameA
GetConsoleCP
GetDateFormatA

msvcrt

tan
??0bad_typeid@@QAE@PBD@Z
??_U@YAPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
??0bad_typeid@@QAE@PBD@Z
?name@type_info@@QBEPBDXZ
?set_terminate@@YAP6AXXZP6AXXZ@Z

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE