17eb614d707cfb39bc2fb8b436d3bee4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17eb614d707cfb39bc2fb8b436d3bee4_JaffaCakes118
Size

16KB
MD5

17eb614d707cfb39bc2fb8b436d3bee4
SHA1

03be947de1279e945af4f02fc920b646a92364e3
SHA256

c8a4d8c446ba48d4f98e57a829b1be7baa797e632730ed60df15cd0389a14f80
SHA512

249c16db809edd52129f4e3d1465bbea1812c325a051fd8b7f9efa29f989152c264db5ff9d62e6a4ba3c7d1a7dc874cb27bd1038cffe4c6ffdee57c6a86cb5d7
SSDEEP

96:HjKFJskeU2aCuYUUoKYUZblWWmnSG02b9vYe2LOZlg:WFJHma5YZoKYSblJFG9vYbOs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17eb614d707cfb39bc2fb8b436d3bee4_JaffaCakes118

Files

17eb614d707cfb39bc2fb8b436d3bee4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f53daa4ca00c574fb7f3f19df26af0ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GlobalFree
GlobalUnlock
GetModuleHandleA
GetLocalTime
GlobalAlloc
ExitProcess
GetCommandLineA

gdi32

CreatePatternBrush

user32

RegisterClassExA
SendMessageA
PostQuitMessage
MessageBoxA
LoadBitmapA
ShowWindow
TranslateMessage
UpdateWindow
LoadIconA
LoadCursorA
GetDlgItem
IsDialogMessageA
GetMessageA
DefWindowProcA
DispatchMessageA
DestroyWindow
SetDlgItemTextA
CreateDialogParamA
SetFocus

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ