17f91389302bc335894e39f3ad271030_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17f91389302bc335894e39f3ad271030_JaffaCakes118
Size

327KB
MD5

17f91389302bc335894e39f3ad271030
SHA1

39d61183d86fa45bad6732cc17b5c7978db3dcfd
SHA256

9787244d4258f622f2dad3932568f1f0aa6e910cae3be291c4c3fc942b3215a9
SHA512

034fe8f8f19fdc98f26082631f67781b6c2bf7614a505332d2d20d922977c020d2d19845374d9ae5cea4737de9ca6a2c6294d11790df628c7270d728def58300
SSDEEP

6144:pHDoD7uzCn+llTzBfjVgntfjQryl+MV3hiUmigD7r:pHcD7Bu1zJEj3f9hiv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17f91389302bc335894e39f3ad271030_JaffaCakes118

Files

17f91389302bc335894e39f3ad271030_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c734c88dbd777ecf01c60f3db9e6c92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
CloseHandle
GetModuleHandleA
GetDriveTypeA
Sleep
FreeConsole
FindClose
SetLastError
ReleaseMutex
CreateMutexA
GetTickCount
LoadLibraryExW
GetComputerNameA
VirtualProtect
DeleteCriticalSection
TlsGetValue
GetLastError
EnumResourceTypesA
GetDiskFreeSpaceExW
GetCommandLineA

shell32

SHGetSettings
DragAcceptFiles
DragFinish
DuplicateIcon
ExtractIconA
StrChrA
SHGetMalloc
ShellMessageBoxA
SHFree
DllUnregisterServer
ShellAboutA
SHGetDiskFreeSpaceA
DragQueryFileA

printui

bPrinterSetup
PnPInterface
vQueueCreate
bFolderGetPrinter
vPrinterPropPages

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ