17f5d4ab74876579ab4832bab0103a23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17f5d4ab74876579ab4832bab0103a23_JaffaCakes118
Size

18KB
MD5

17f5d4ab74876579ab4832bab0103a23
SHA1

c3a5dbf708f669d9f7c9a2c63b6ec31dc00ddeee
SHA256

bfb390e9d539ea4d073f14beef95d4342b89360a98a91931f192d45a8c51dd00
SHA512

993d4899bbe53acb9b81b588d14f3ba538704dd6e674ea05e2b2bcb08825a759c3b623151649b698b00c2d35380b05a2a4324b431e5c1a44b8741bf3a8274baf
SSDEEP

384:ld4v6yNGHEwarI9rucUoPU0c/FnxrnRl4snuJRhxqTux:XiQ7u8qxocl5BR/nuJ/xqT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17f5d4ab74876579ab4832bab0103a23_JaffaCakes118

Files

17f5d4ab74876579ab4832bab0103a23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46d691497927f6be3201475ad86fd6a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

msvcrt

__set_app_type
signal

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 84B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE