17e57c9441ce57139c1d855f7b18c534_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17e57c9441ce57139c1d855f7b18c534_JaffaCakes118
Size

307KB
MD5

17e57c9441ce57139c1d855f7b18c534
SHA1

76798fbb8394d4a0d8bb37e25df338b564e62ddf
SHA256

a8a05c479c1ed5c1ef9f8729084408aea26d3e01bd09eddb82f75436caf1d827
SHA512

2eb1d5caa12d7b0a0efb97f13306e3a9ff5ebd35502199dc88c69ed416a8f619dc1b7ef1d2882b94948f37dcf9b2fa9c1662c75441f1bfb2ac1d20f1d07088ba
SSDEEP

6144:KuoGU601V2JWNK64IvxALF1T65FyGcLQ+E2z0D7R5:Ku27kdSJATY0jQX2z2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17e57c9441ce57139c1d855f7b18c534_JaffaCakes118

Files

17e57c9441ce57139c1d855f7b18c534_JaffaCakes118
.dll windows:4 windows x86 arch:x86

960c97adb9e8ff8d84851b6857627249

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 234KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

ccc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE