17e6d1e14b5342f96a79dc725eb8bcc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17e6d1e14b5342f96a79dc725eb8bcc1_JaffaCakes118
Size

89KB
MD5

17e6d1e14b5342f96a79dc725eb8bcc1
SHA1

96160bf80eb795f8285d1604038315e3b5f7437e
SHA256

064d24b6046b0e8016363ee2c5ea77fc4fd8f8aa5b81d7b3a50a1ae146215ad3
SHA512

9e484931b31dbb4ed6aaefbc60a7aef4464411707304684a3c036072ce818e1b7065c84bce716f98d22bd08b718358024c67173f4b3aa8e5e80729758a25a131
SSDEEP

1536:djqjoQ05q12JX+Xfqtqel/pMn8yilaG8sIT7hQnokNxOKa2GVrh2lWguKtIg:goJa2Qfeq4/p28JlalsIT7hQnpNgBVNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17e6d1e14b5342f96a79dc725eb8bcc1_JaffaCakes118

Files

17e6d1e14b5342f96a79dc725eb8bcc1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

SetHP
Setup2
Setup3
Setup4

Sections

CODE
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ