17d0c6a9c8e401ac066e2e48b13168a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17d0c6a9c8e401ac066e2e48b13168a3_JaffaCakes118
Size

131KB
MD5

17d0c6a9c8e401ac066e2e48b13168a3
SHA1

55286b88a16a282e98657f967ed9c429e7bc173d
SHA256

a0c798894456a8c335e23d2e2bd5898b6b177908a71b9d24bdd65f2b682301bd
SHA512

0c817080df055b1f922aad1037e569c05e2bd5fd0f39d0a6913dcd77024377ecc4818e8fac3013c568c936c9908c20f73479cf9e0264d7d3056bbdbf5cb02763
SSDEEP

3072:Xu/+LL2+z3CuKFm+8V/JaDRID+ClMswVuwFNXwgTR:X3Lx7Cu6mhxURJCjwFNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d0c6a9c8e401ac066e2e48b13168a3_JaffaCakes118

Files

17d0c6a9c8e401ac066e2e48b13168a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01da600e6bc960ad5d2b354eb87b1803

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreatePopupMenu
CloseClipboard
DefFrameProcA
GetCapture
DefMDIChildProcA
GetDesktopWindow
GetMenu
CreateIcon

gdi32

GetBkMode
GetDCOrgEx
CreateBitmap
GetDIBColorTable
GetBkColor
GetCurrentPositionEx
GetTextColor
RestoreDC
SetBkColor

comdlg32

GetSaveFileNameA
FindTextA

kernel32

GetVersion
GlobalDeleteAtom
GlobalAlloc
GetVersionExA
GlobalAddAtomA
VirtualAllocEx
ExitProcess
LoadLibraryA

Exports

Exports

rP33sI73FhX1q@20
DGeITnnv
_JJ5iI8E5cAO_0t
sDAK1Kq27vuK@8

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ