17d92055309d0657472a8939c1a72a58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17d92055309d0657472a8939c1a72a58_JaffaCakes118
Size

69KB
MD5

17d92055309d0657472a8939c1a72a58
SHA1

73691e7284e9270e5ffc325fb16c66304ffaaa86
SHA256

01ac480670bfdedd0f336926a8562057728f154b58d05f2e82623fb7b09d8325
SHA512

b54d7c946737e744df6e20e49e4943b694c13336e37c968f6ec4b2eab2e568e0535be51a090793f826a7657c4a65737b23c2bfbb1ccf57c825822754f82aaab3
SSDEEP

1536:Bn7fPC3PgIJnya9O/w8gSRNurlsnSaC7jiUI2Od5nwb7DqR:F3C3Ppya9OLNurmnRCKUI2YmC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d92055309d0657472a8939c1a72a58_JaffaCakes118

Files

17d92055309d0657472a8939c1a72a58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78f90404917c91dede5c672e357689e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBkMode
GetTextColor
CopyEnhMetaFileA
GetBkMode
GetRgnBox
SelectObject
CreatePenIndirect
SaveDC
LineTo
GetDIBits

user32

GetWindow
IsDlgButtonChecked
KillTimer
GetWindowTextLengthA
CharUpperA
SetWindowLongW
SetWindowPlacement
IsCharUpperA
SetWindowLongA
CharNextA
IsChild

kernel32

VirtualAllocEx
ExitProcess
SetLastError
VirtualAlloc
LoadLibraryA
VirtualFree

Exports

Exports

mWbgLXr_IqvCK@8
1n3Wb7xJl
0Fk0Fz9N@16
_2uPSP_sQ0vJZ
DoBcdVKLhf
V7oME7l@16
D3xzhjVfP7Hq@16
_jwoVtLpOIg
kAfKspXpo
_BZRJvKTQncu@12
_Rh6CuqSselKw9
_OgXhRcstja4
_1PUjKJEZowYaDb@20
8F2pmrm01C4@20
_MADgdfD5vzm@8
vbyiJyX
D9Oe2Foz
_32wFgMN
nTEvu3GigRomT@4
BXMzwOyfSic@8
_Fwl0l
_fy2dojJ4vtWPd
_yFDmg4R8oV
Y2zL0GO@4

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ