17a53b2a1d23655209700d1b81c3a636_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a53b2a1d23655209700d1b81c3a636_JaffaCakes118
Size

41KB
MD5

17a53b2a1d23655209700d1b81c3a636
SHA1

79a1a64a26bd85f608e8e46226c4373c8ee5db4f
SHA256

e75ffbd689707e394f6949a0031f456103755950cd2ea97499da6fb1ce5586ab
SHA512

015f8cff84c6674ed40010bcd9b3c9dc58183a67e66ad8dfb9fc19311b41ed577b063cdded8ed430d7f72090bdae573c4dd95605ec5fd5b7d990662b6b3ea51a
SSDEEP

384:4tbAdoraVlV9F1jaPLQELYpuqcutctCabtisgqHXXHfNaMCuD77UXyyNd:4tkdorkV9/aPs2YpnBCt4q1aDg72n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a53b2a1d23655209700d1b81c3a636_JaffaCakes118

Files

17a53b2a1d23655209700d1b81c3a636_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c50cefcc639f1bcd0de2884761efc51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrcatA
ExpandEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetVersionExA
VirtualAlloc
CloseHandle
CreateFileA
GetWindowsDirectoryA
GetLocalTime
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
HeapReAlloc
GetStringTypeW

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

ws2_32

gethostbyaddr
inet_addr

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE