17316d72d1ca0d5b90cabea350c00a84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17316d72d1ca0d5b90cabea350c00a84_JaffaCakes118
Size

51KB
MD5

17316d72d1ca0d5b90cabea350c00a84
SHA1

b096aeb23eb7d7a70e472158ef85d6ee696ff8d3
SHA256

d732d7e62fc29c71de0335c110ea48965a30ebd4df4cac42901ff1f4b47dfca2
SHA512

f501cd9e0c2d16f6a5306a3168f4b99e34b7e23d7678c34974c665c82491f8af226b6de21c5167206e147deeab768c140153c60f284b62b0d619389b6f18848d
SSDEEP

768:e1DjQe+DGgnVALvj/NSB+vI8jZY2Reu2dRy4UYRGomeIUiBmB6fWvWGdgtOZ:e1QniQNTu23ype5i8QOj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17316d72d1ca0d5b90cabea350c00a84_JaffaCakes118

Files

17316d72d1ca0d5b90cabea350c00a84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17a2446bacd595182f178ac0a4964c7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
sprintf
getenv
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
??2@YAPAXI@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atoi
_except_handler3
_ftime
strlen
_initterm
srand

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
Sleep
GetStartupInfoA

user32

DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ