e17b257390605980f7a30c54b6d79616_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e17b257390605980f7a30c54b6d79616_JaffaCakes118
Size

10KB
MD5

e17b257390605980f7a30c54b6d79616
SHA1

a00322d3597c62800be657017f6870c9e63229d9
SHA256

4ff9091c9446844d255e1e5005a545299b43c1b5a3dd0714bf4ab14336e7cf9b
SHA512

bbf3e9f71b509d999364e350c9d36032985a48f584d4d4dd23f5b004776a6aab21a115b14b38c24f34bcb83386eee87bf317a9b196b5672da8f34626475f9e76
SSDEEP

192:MhT8u11Lre/827jRGuybVTdLofYMeUtqk:MhwH7jRrybVKYTUtqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e17b257390605980f7a30c54b6d79616_JaffaCakes118

Files

e17b257390605980f7a30c54b6d79616_JaffaCakes118
.exe windows:4 windows x86 arch:x86

689158dd5c2bf6a3e9a26ca1ff0778db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetLastError
GetTickCount
Sleep
FreeLibrary
ExitProcess
CreateFileA
WriteFile
CloseHandle
GetSystemDirectoryA
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA
CopyFileA
GetProcAddress
CreateProcessA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
FlushFileBuffers

Sections

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE