17e27f6f07bd65f29a50608421d29356_JaffaCakes118 | Triage

Sharing

General

Target

17e27f6f07bd65f29a50608421d29356_JaffaCakes118
Size

92KB
MD5

17e27f6f07bd65f29a50608421d29356
SHA1

15573ea9b1718a97970dee2479fd1910e965f940
SHA256

dda69de060838a94b83d0dc438283b4dd8006aee87ce23f9027077301ec51b37
SHA512

726024a027f673338539620939353b7bda0138b2193199a60d30acefb6e26b2899c9ea5cb2bc889fadde38f09e678b0b79493dbc21dd6485e52fce968f835bb9
SSDEEP

1536:TY3bev4pmaOiG9Z14wlr1QU+kt4NQSkQWjI/GDT63HXTs0g:TYLkBjewlhQUXtBSCsBHTs0g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17e27f6f07bd65f29a50608421d29356_JaffaCakes118

Files

17e27f6f07bd65f29a50608421d29356_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ffd7ca6700a211927aeff26226d115b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
GetTimeZoneInformation
GetConsoleTitleA
SizeofResource
GetFileAttributesA
GetConsoleInputExeNameA
CreateFileMappingA
ConvertThreadToFiber
GetStringTypeA
_lclose
MoveFileExA
GetStdHandle
AddAtomA
GetQueuedCompletionStatus
EnumUILanguagesA
GetSystemTime
GetConsoleAliasExesLengthA
GetCommandLineA
GetStartupInfoA
ExitProcess
GetPrivateProfileSectionNamesA
GetPriorityClass
LocalHandle
Module32First
ExpungeConsoleCommandHistoryA
IsSystemResumeAutomatic
SetErrorMode
GetFileTime

Sections

WEIJUNLI
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ