17b42dd06c3616a9bddc0060cdc95d9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17b42dd06c3616a9bddc0060cdc95d9f_JaffaCakes118
Size

122KB
MD5

17b42dd06c3616a9bddc0060cdc95d9f
SHA1

1b47fe180d146a716a8680fb23d87bbc0046bd81
SHA256

9197597c4dd421fdca9fc4164d8cd3428d8e3cb6736a5d2fcdc75f372f7e5ede
SHA512

b14d1f72b90a448d9e0d4334008a6a27dd0a6fa132702c683623ddba3d64fe46944df8be32e66f160ec51bcdf8fbe48bacfd8339f56ca66a313a9fe98d1d5c8c
SSDEEP

3072:UpsA5oG4iIsdq3JYsMjUG52vFWa8IClbLCjiUIqNl:msxskZFMZ54Fi3CWUIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17b42dd06c3616a9bddc0060cdc95d9f_JaffaCakes118

Files

17b42dd06c3616a9bddc0060cdc95d9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdd7781106b37e9ac8cc126689236432

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ