d17fc4168a736502f77d3dfa5e241b3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d17fc4168a736502f77d3dfa5e241b3a_JaffaCakes118
Size

12KB
MD5

d17fc4168a736502f77d3dfa5e241b3a
SHA1

8a1cc23367025e14407b54726cb4937567c1b808
SHA256

5859dcc0642a4895dbb008621d9ae8e2ab9fde90354690faed011e1898499ef3
SHA512

1953ba3d8f3589486b7bba4af41ab8082017a3089dc2c29bc746aec7263a229a0a4ce72be90aa8dfb5de7e9546eb3f9ff215e758a30edaceb442670f2a99d780
SSDEEP

192:TajwXAiaSMCebhNk0EWgTrXtsJqNVG/zF1GO6zOE7PhWaeU7dQuqxs5iG:TW4aSMZbrnydvNVozFEfzOEFTquusgG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d17fc4168a736502f77d3dfa5e241b3a_JaffaCakes118

Files

d17fc4168a736502f77d3dfa5e241b3a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

fd941deb78fef2c61a3383a44382aa52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBindToParent
SHFormatDrive
DragQueryFileW
SHGetDataFromIDListA
SHGetPathFromIDListW
StrStrA
ExtractIconA

msvcrt

__iscsymf
__argc
__toascii
__RTCastToVoid
__unDName
__badioinfo
__crtLCMapStringA
__pioinfo
__unDNameEx

wininet

FindNextUrlCacheEntryA
GetUrlCacheHeaderData
FindNextUrlCacheEntryA
CreateUrlCacheContainerW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE