17542956ba722933a30b6c6df66feb1a_JaffaCakes118 | Triage

Sharing

General

Target

17542956ba722933a30b6c6df66feb1a_JaffaCakes118
Size

344KB
MD5

17542956ba722933a30b6c6df66feb1a
SHA1

05d426373acf7c249395927ba546dd5eba689e60
SHA256

d85bb0b921218f5316cf583a1e48ee70dfdbaa6de3a0e99a18ac8f9e5cdc4e49
SHA512

8397317320397d27779b9513adbe6125e34f2920f75a7959a94246c1df5ad70947c43dffac429b0a16f3ac6a64f087c3722023721b3ea9199d977b084fc9b349
SSDEEP

6144:zu9F4WKrXsI0BgUJMOvVMFXShA89YTc0BFApU9/IkAE04fK+vzau+:69WWaXIgu5SFCl9ecna9Q7kfK+e3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17542956ba722933a30b6c6df66feb1a_JaffaCakes118

Files

17542956ba722933a30b6c6df66feb1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee222ae8d5dd02ac15adf343222a2c95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseDC
DestroyWindow
EnumDisplayMonitors
CharNextW
LoadImageA
BeginPaint
MessageBoxW
RegisterClassA
LoadIconA

gdi32

SetBkMode
DeleteObject
CreateDIBitmap
GetDeviceCaps

advapi32

RegQueryInfoKeyW
CryptCreateHash
RegEnumKeyExW
CryptImportKey
RegQueryValueExA
CryptDestroyKey
RegCreateKeyExW
CryptAcquireContextA

kernel32

GetTickCount
GetACP
GetModuleHandleA
WaitForSingleObject
GetProcAddress
VirtualAlloc
LoadLibraryA
GetVersion

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ