17a9d69ff0eec52187b2a63690da7f4a_JaffaCakes118 | Triage

Sharing

General

Target

17a9d69ff0eec52187b2a63690da7f4a_JaffaCakes118
Size

19KB
MD5

17a9d69ff0eec52187b2a63690da7f4a
SHA1

e9e134a8ce182b890c54659cf00f7612cea07b12
SHA256

07fa6ba13dfd1d980169adf9cf76c9bdf26bb51bbd6ba656aa43f4fc6769f6c7
SHA512

82a94d90df692643188cb6d859c9597a7aadd619cc49275dee93fdd1e6ab739b0056d3b7836f6a259b470513cbb5e57dc8143da995d71c4e4161195e1af1ad7f
SSDEEP

384:i9z3weMLBT1vG2GdTWpe+egOKfIeu6BwsAb:peMhVGMpeogeVxA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a9d69ff0eec52187b2a63690da7f4a_JaffaCakes118

Files

17a9d69ff0eec52187b2a63690da7f4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2c32195f335624c1bebec16927498cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
GlobalFree
GlobalAlloc
ReadConsoleA
VirtualAllocEx
GetUserDefaultLCID
GlobalLock

tapi32

lineRemoveFromConference

dsound

DirectSoundFullDuplexCreate

Sections

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ