17d188a4b51bdd2b949758a32b731d65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17d188a4b51bdd2b949758a32b731d65_JaffaCakes118
Size

41KB
MD5

17d188a4b51bdd2b949758a32b731d65
SHA1

11fd0e46e9df403ed12c81688896c596fb766fea
SHA256

b8b29f7d846c6dfbec454b8360f83db74d8505c564c84fc1ac7e4a219cebbb7c
SHA512

62f7e2f0cd5739b77800d4319526369bc7c865eb5fd43ed7d9493a7e1b67f955ae17c08309060999a1b006408b4b1b1abc9dd72e3df29a69d82845c9fc35353a
SSDEEP

768:EVnyUrPyafEKjDMWM1FLE+tegc0pg1Reh1R6SIn9S7RXSOX:EVnuafE/r1Fp5g1RU6n4liOX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d188a4b51bdd2b949758a32b731d65_JaffaCakes118

Files

17d188a4b51bdd2b949758a32b731d65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb6f998b6ddc55b66574b1645d6a380b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetTickCount
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ