JaffaCakes118_17ead9369fd2463bd9ccdfb4c2203846 | Triage

Sharing

General

Target

JaffaCakes118_17ead9369fd2463bd9ccdfb4c2203846
Size

93KB
MD5

17ead9369fd2463bd9ccdfb4c2203846
SHA1

dbfcc16b56e7a0ad3418bde095585b4623da42b7
SHA256

46bcecb3cf8e71e17590ea667c97198f6097144b77ad2dc79a68f64a62a3daba
SHA512

d29503c05c28fc8812fd11fcc03c4ab70bd768ae4814e6a5b58269477d6d700c89db757fce58827e9ef149f7d2835f19fc0d3d0f56c1d4a5788a0ec5c2afc488
SSDEEP

1536:rDNVimlv7nQ/0eMq76Atj7QrFSJMdjGTVCCTPv59rm+NH6RlvI2dwoQkc8UVaaHZ:rXhda76Atv2epdhZkl1FQkmaaHw7Koj4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_17ead9369fd2463bd9ccdfb4c2203846

Files

JaffaCakes118_17ead9369fd2463bd9ccdfb4c2203846
.exe windows:65535 windows x86 arch:x86

97734ff984bc8361d435f8b412ab3301

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect
GlobalFix
GetConsoleCommandHistoryLengthA
HeapSummary

msvcrt

rename
_mbspbrk
_initterm
__getmainargs
__p___initenv

netapi32

NetUserGetInfo
NetWkstaSetInfo
NetApiBufferFree

Sections

.text
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ