17abff3e5faf0482625b462dc371928c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17abff3e5faf0482625b462dc371928c_JaffaCakes118
Size

138KB
MD5

17abff3e5faf0482625b462dc371928c
SHA1

8bb2e44e2e3f71951e44f3ac0556b6bf6619aa35
SHA256

dcd3a4f30ddc5749f0d5ce3a6e6689e6c161995e47bc199efab181744a9b64de
SHA512

3ed53c0110951960a9349954d4c53b0cdef7ffe2f6cf71b97475435ea40d7f76d6d6cb774ffb7c5ab1d3d45fc6ce5e41927ec08758359e0904a7615507c79b98
SSDEEP

1536:qkkTkjKqeOCLaCmaQHWErnLd+lEMf7q7bPIXNNnAnCd9bn+xQ1rFPxojyA6FGyd8:qkkTkjFbCU6EroEjr96iUvhVyYpKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17abff3e5faf0482625b462dc371928c_JaffaCakes118

Files

17abff3e5faf0482625b462dc371928c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

api

Sections

.text
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ