17d043dee8e696adf8cb4373e010684f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17d043dee8e696adf8cb4373e010684f_JaffaCakes118
Size

81KB
MD5

17d043dee8e696adf8cb4373e010684f
SHA1

6335178962a8c82525dbe85ae1a78356e3ab1d8b
SHA256

6c6b64f7881b5a1ea93ebe83bccdf80076b010f0fbb1ab92a34fcc055a33124f
SHA512

3b207caf780e26b2b17d8bec137eb188d9409cceaec349582bee0f658dcf4217cbfbe537eaf8284249364b953c6daf4db9ef463de480b7320ce1ff4e39474cdb
SSDEEP

1536:k0TVY8u+jfR6JA7XJHYwupZVUWo8x/xn4SUSHZ7xX6RhtpsRgNyoEG44Xe:kEVO+j/LJ45g52n19LX6RjEGVXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d043dee8e696adf8cb4373e010684f_JaffaCakes118

Files

17d043dee8e696adf8cb4373e010684f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE