17a6d6abba18805b8962c239f6df29eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a6d6abba18805b8962c239f6df29eb_JaffaCakes118
Size

310KB
MD5

17a6d6abba18805b8962c239f6df29eb
SHA1

be7d7ec5da0a84f5fa82f1094f8e0a9156afadcc
SHA256

01b84c351c0126cfdc748a834737e686155a38e832e8333a1ceaded70749e985
SHA512

4ef04ed76545541dbf527589639a04fbcd2a7e513139aae5359eeea11d6769e908535cff7e231d53be3f85d6e6c2ad2d015617c857eefcd12548a23cbb4619ee
SSDEEP

6144:8oOFjIqv157AoqWyxgBkS0O89IFkkZlZ+udfZjkH6op6PDed/s1+Yzc9ddz:HE7Ao8TV59A5lBSH6g67edmI9fz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a6d6abba18805b8962c239f6df29eb_JaffaCakes118

Files

17a6d6abba18805b8962c239f6df29eb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7522d1236dcfd7094a93fa6d626bbb72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

BeginPaint
GetDesktopWindow
PostQuitMessage
RegisterClassA
ReleaseCapture
ReleaseDC
SendMessageA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 147KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ