17dbec7561f33d293e5d6b7f7fd1076b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17dbec7561f33d293e5d6b7f7fd1076b_JaffaCakes118
Size

186KB
MD5

17dbec7561f33d293e5d6b7f7fd1076b
SHA1

e0c9beec5647cfdb7a5926bc96bb733888759f1e
SHA256

534e0432c0e30be3815d1acdd1407d23a8da987ac8b18be506cd4c305117a0fc
SHA512

0299ee2764608f6781ff75495f5e9fc6cebda52f8ab48df86e310141215a03d18a076651763f3b1e7046eefb5251eb246187f2965e1892268bccde1a0590f0bb
SSDEEP

3072:Ueh8xJNfnGwqGRBB6ejNoUVsYbmlPif2AuvzZzpOwEchdJX9waP9oA5Zm3vYmA:Ueh8xJ5XqGXcejlsymlPqACDuJXRPmA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17dbec7561f33d293e5d6b7f7fd1076b_JaffaCakes118

Files

17dbec7561f33d293e5d6b7f7fd1076b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

0
Size: - Virtual size: 440KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 155KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE