17cf265c55f08d0ae0942670e4dbb8a4_JaffaCakes118 | Triage

Sharing

General

Target

17cf265c55f08d0ae0942670e4dbb8a4_JaffaCakes118
Size

193KB
MD5

17cf265c55f08d0ae0942670e4dbb8a4
SHA1

113f5e81d41e949cdb5a3a6cca991ef875c6f117
SHA256

5a48317bb8068e784f82957792aea5471ca3864ab077003c206d6f5787a72e3d
SHA512

6a025a0932ac4ea25a386a590ac89a7741fd56ee4a3ab8c12f7c4661706b0ceecc6c0b4eee27f933f97a7dcf8b456000f595ac2c5456ae3f62dd307775455adc
SSDEEP

6144:8Vb6UY1gYsYOt0HOKeAvhI+tUl1u/EofheY:sb1DDhtrkhIeUl1u/EofJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17cf265c55f08d0ae0942670e4dbb8a4_JaffaCakes118

Files

17cf265c55f08d0ae0942670e4dbb8a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fe172c36f7d34342927eb01006e0a5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
CloseHandle
LoadLibraryA
CreateFileA
LCMapStringA

user32

wsprintfA
CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA

advapi32

RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA

Sections

.text
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ