17ccbdd2f1e9c571e8c5b77e30fd41c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17ccbdd2f1e9c571e8c5b77e30fd41c0_JaffaCakes118
Size

1.3MB
MD5

17ccbdd2f1e9c571e8c5b77e30fd41c0
SHA1

26ce1ffb86bf5cacefd7b3e02cfc70355f7eb6c7
SHA256

ce0fbf233afd86d15b0125542cca65c44a574b47472f49f7edacfce9cddcfe79
SHA512

e170891d4a8840a7871ba745020488416c5ac3b0d7aae73661dcfdd403095ed1ea7d5362a173304ac471019f5a6ff82e86aa5c6f441654155908cb2ea5fc74c8
SSDEEP

12288:gn/Y8TiAD/xcZHJVUSHtXIvs8vF5inYbBy0UZ7FppYS6P7YuF8FqhuhJ26+gG:vAD/xUpVU/PUXZ7ymhJ2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17ccbdd2f1e9c571e8c5b77e30fd41c0_JaffaCakes118

Files

17ccbdd2f1e9c571e8c5b77e30fd41c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Workspaces\HPAssistant\Dev\HPAssistant\obj\x86\Release\HPSF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 966KB - Virtual size: 965KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE