17cd78000bcf59ab258e21fa312b00a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17cd78000bcf59ab258e21fa312b00a0_JaffaCakes118
Size

133KB
MD5

17cd78000bcf59ab258e21fa312b00a0
SHA1

521c5cec5749f37fc79daf6d4edd47ff0c8d4d0b
SHA256

7839803cc597dd33fa2ac8b9cfdc72165a7452031bc3e153094aa2b6e1296320
SHA512

fd3f9e8b8b7f9a98b8d03db4a861adcc08cf2a16fd36ab9eafd35a4dc0474645cec706b7a7df0e5801c60bfc2e6b8a0a8b051dae11b5cd037cdc78d58b4a9c21
SSDEEP

3072:rRpOZ9NEZgO7sR3A1WvxAzHlySbmR5tAqccIhwlC:rfO9EWOa3GWvyrlyNR5tADcrC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17cd78000bcf59ab258e21fa312b00a0_JaffaCakes118

Files

17cd78000bcf59ab258e21fa312b00a0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e5f7b78daf963e5eec6c60f3e5c7540f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptDestroyHash

msvcrt

abs

kernel32

LoadLibraryA

user32

GetActiveWindow

Exports

Exports

ºormatDesktop@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?FormatGUI@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?FormatGUIMonitor@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?FormatHandle@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?FormatWindow@888GPAUHINSTANCE__@@U_COMMPROP@@`D

Sections

.round
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdi
Size: 512B - Virtual size: 383B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.same
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ