17284afa00ebac3b3952f16e61a5cb34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17284afa00ebac3b3952f16e61a5cb34_JaffaCakes118
Size

72KB
MD5

17284afa00ebac3b3952f16e61a5cb34
SHA1

e3a6a617f0ef3d91fdce2fdd43da2e35d54eb04e
SHA256

7979aa888e4c4fe7d2917821092a29cc8794a76c697edf32a863fef820920e23
SHA512

a0049ecf2455c7788509cbe871bf1c802d407435155180c7f1b8288fbb0af295abdef58c2e182a01e3e2f588598796c8b655b3ceb498509f18df59942d168db6
SSDEEP

768:EsDDkoxGM0lkrZNMsA4beZAAeIqwZJAZwEi2j+J8Nh:5VGM0lkrZNHJ1IqwZJAZfp7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17284afa00ebac3b3952f16e61a5cb34_JaffaCakes118

Files

17284afa00ebac3b3952f16e61a5cb34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

284ff5476132ea2d2ffeeb1e5ce541d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_adjust_fdiv
strlen
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_initterm
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ