17a34d13e0f2da3c2030eb88af7b56ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a34d13e0f2da3c2030eb88af7b56ba_JaffaCakes118
Size

23KB
MD5

17a34d13e0f2da3c2030eb88af7b56ba
SHA1

5ce1912020de2a6c73ee2d59894cac38ac426f29
SHA256

ee4448e52c92ae96e38eca68da4138a356000aa46ac55a3c0b13d98a809583ce
SHA512

f59825c76518ab82f946230c8dd8f9a33257ea35bcd18a3c8767ff954c53a5cbb052217dbe6a1ffe098ce8505469a1e75da2404e161300484acbd0b5bb324a45
SSDEEP

384:o/jeH2ugFirE2RTwnpXtp+bSV5WNHWR9+EMQpv:MeSiJTwbYlY9lVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a34d13e0f2da3c2030eb88af7b56ba_JaffaCakes118

Files

17a34d13e0f2da3c2030eb88af7b56ba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

11ccb4e69b1279ecabec8d9d7ccbf149

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

msvcrt

memcpy
memset

user32

CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA

gdi32

GetStockObject

advapi32

RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ