17a20fdfe9fd1013c91200311cca8f9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a20fdfe9fd1013c91200311cca8f9c_JaffaCakes118
Size

244KB
MD5

17a20fdfe9fd1013c91200311cca8f9c
SHA1

6ebf1ea0c9bd4b8a08b67278cf87c3d4e22b1b41
SHA256

69997c41211ccc1747084963738a77f5215ae1bbdcf62e12451a1d42c43ea0f0
SHA512

a2b7c0d0c15eb2413eab3354b789319d0a56953146c53d6c13b93b04a3ac98b44d472f49bf5042a9dd4b8577d4603a5cdda33982b49cf43a3ec0336387090396
SSDEEP

6144:D8ZIPk7VM4srV36JOXZiuSWSWVzXST75G6i:D8ZAeuJyOLzXy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a20fdfe9fd1013c91200311cca8f9c_JaffaCakes118

Files

17a20fdfe9fd1013c91200311cca8f9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

935e93087b031229795c061800a68bb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
ExitProcess
OpenFile
GetFileType
CloseHandle
ReadConsoleW
GetProcAddress
GetModuleHandleW

gdi32

GetRgnBox
GetClipBox
GetPixel
GetMapMode
GetMiterLimit
SetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
GetDeviceCaps

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ