17d4014f5bc6b6e3272cd8f8d76ccc40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17d4014f5bc6b6e3272cd8f8d76ccc40_JaffaCakes118
Size

71KB
MD5

17d4014f5bc6b6e3272cd8f8d76ccc40
SHA1

7e6a71ada2fb1075a0bd0aba260bf9ef06fd0191
SHA256

4b19c9536fd411a3c419e8d7fe04f4c322d5dcba10d6ee3de8e9cff86b7ac64a
SHA512

9f46be8f9fd7895e241ee584d96a8eb075a22bc69489bb0c069d1c8181fa0369a01ce01f7fc86921d03d0cb9385057b2e36c2a204a2eb04cd1528f5537e06b87
SSDEEP

1536:khuGOXqpR5FFI0AVb2P4NfxHOS5LNblKhZVpgXa9WvUpJe3TlnEXrDE:khu/qpR60+CyJblKfVaKMeJIEc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d4014f5bc6b6e3272cd8f8d76ccc40_JaffaCakes118

Files

17d4014f5bc6b6e3272cd8f8d76ccc40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b33cf30271d87409e3bf8764f86e0f62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FoldStringW
RegisterWowBaseHandlers
SetLastError
FindResourceA
FindNextFileA
EnumSystemCodePagesW
GetCommandLineW
FindActCtxSectionStringA
CreateActCtxA
GetConsoleScreenBufferInfo
DebugSetProcessKillOnExit

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE