17090b604e226c2ff7995363d50ce1b0_JaffaCakes118 | Triage

Sharing

General

Target

17090b604e226c2ff7995363d50ce1b0_JaffaCakes118
Size

180KB
MD5

17090b604e226c2ff7995363d50ce1b0
SHA1

74d752321f0f408b7e9868184f2950bf624eacb8
SHA256

824c79ad503cb8b51d3472ab8de1fdbe3ee1d482ab5121af2471ed6a5b6790b5
SHA512

864b40ee83c8663c8b0be829a849b2398980789ed6dd1fb9f4cac7fb0fe74594687e74e4e2aa5da66c4f051757c6353d2be9068d5321878f61c55563888cb3cd
SSDEEP

3072:L2GATrO+ImMcfYmze421Zzk/Pn6eBhah4pk7FPOaZmALQHmJk:LT6ImMQzM1Zzk/f6qQ4pk7FPRpFW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17090b604e226c2ff7995363d50ce1b0_JaffaCakes118

Files

17090b604e226c2ff7995363d50ce1b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c78817fb648bc97ddc3fd5704678196

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetExitCodeThread
GetModuleHandleA
HeapAlloc
UnlockFile
GetLogicalDriveStringsA
GetOEMCP
GetEnvironmentStringsA
GetACP
ProcessIdToSessionId
GetConsoleAliasA
GetStartupInfoA
GetSystemWindowsDirectoryA
DuplicateConsoleHandle
ExitProcess
CopyFileExA
ReadConsoleInputA

imagehlp

ImageGetCertificateHeader

authz

AuthzOpenObjectAudit

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ