17d1a50f6bb5b576fa6756809c4c9304_JaffaCakes118 | Triage

Sharing

General

Target

17d1a50f6bb5b576fa6756809c4c9304_JaffaCakes118
Size

565KB
MD5

17d1a50f6bb5b576fa6756809c4c9304
SHA1

92ef5c942252c8454d3b64223d73304cae26ec7a
SHA256

d6d5607ca1bd0d83ff19b5d5656ac630fbe20954338e28821e5433d95309edce
SHA512

8990dc92ecb01e22ad77a8bf4db29c24582f95f4185ffc5d0a2019973948c73354ed3c3bf56a650a5d0d3f38b5e400b8931404f2c53c97e8ca34b2de3a487990
SSDEEP

12288:5EeN2NDk+E5HuS0a9nX5Hrlcnr6hDLstzzYSMaBOwUsRv:DINDm5rnXdpwrUIzkSdBsiv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d1a50f6bb5b576fa6756809c4c9304_JaffaCakes118

Files

17d1a50f6bb5b576fa6756809c4c9304_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e09e73c4fea567b11f4f4705fae5bc58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
MessageBoxA
GetDesktopWindow

kernel32

CreateFileA
WriteFile
SetFilePointer
GetProcAddress
GetModuleHandleA
CloseHandle
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ