17280b0c29e960f3e5a894edf001297b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17280b0c29e960f3e5a894edf001297b_JaffaCakes118
Size

131KB
MD5

17280b0c29e960f3e5a894edf001297b
SHA1

945a7187372ec96dc4434fb88397e253b093ad12
SHA256

d81c3f43621f3279a69412b8ad5e4f6751b142f9d4dceec056375b0f8644303f
SHA512

ab663c2aacb7dfb62288fa246ea7a989da9e46b0e8c5c995c0afe04b56d607d38534b8e669525d09527fac9adb5d86a12ef20d2f96ec2f2bf31d1e940cbf436f
SSDEEP

3072:Xu/+LL2+z3CuKFm+8V/JaDRID+ClMswVuwFNXwgTy:X3Lx7Cu6mhxURJCjwFNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17280b0c29e960f3e5a894edf001297b_JaffaCakes118

Files

17280b0c29e960f3e5a894edf001297b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01da600e6bc960ad5d2b354eb87b1803

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreatePopupMenu
CloseClipboard
DefFrameProcA
GetCapture
DefMDIChildProcA
GetDesktopWindow
GetMenu
CreateIcon

gdi32

GetBkMode
GetDCOrgEx
CreateBitmap
GetDIBColorTable
GetBkColor
GetCurrentPositionEx
GetTextColor
RestoreDC
SetBkColor

comdlg32

GetSaveFileNameA
FindTextA

kernel32

GetVersion
GlobalDeleteAtom
GlobalAlloc
GetVersionExA
GlobalAddAtomA
VirtualAllocEx
ExitProcess
LoadLibraryA

Exports

Exports

rP33sI73FhX1q@20
DGeITnnv
_JJ5iI8E5cAO_0t
sDAK1Kq27vuK@8

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ