17b1617e23645b5049eaba8f048bd1af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17b1617e23645b5049eaba8f048bd1af_JaffaCakes118
Size

699KB
MD5

17b1617e23645b5049eaba8f048bd1af
SHA1

0c0e881358ce5361e5fecf3f41d56debff1f5140
SHA256

fb59665cf9c33bdd22d79da0e200e094a980a86514815265dde73da4660f1a72
SHA512

37009da40376f65718c363fb199b918c278a4956412cd8c55b35efcafc65e1a177e831b1d56d34283debeb448f114de0a68bf5bf6726a2c2990b260cee3614c9
SSDEEP

12288:sQ6BYINUcWg7VvbCLx69iG6uNmJFl5H1A3H25MireHSobh8V3IGhEU:svBYCIg7VTYY9HQXVS29sOVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17b1617e23645b5049eaba8f048bd1af_JaffaCakes118

Files

17b1617e23645b5049eaba8f048bd1af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45b8d1e2fe44db117354c0098116681f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetModuleHandleA
Sleep
GetFileSize
GetLastError

gdi32

GetTextMetricsA
CreateSolidBrush
LineTo
DeleteObject
CreateCompatibleDC
CreateFontIndirectA
GetPixel
PatBlt
SelectObject
GetObjectA
ExtTextOutA
GetStockObject
MoveToEx
GetDeviceCaps
SetROP2
SetPixel

user32

ScreenToClient
EndPaint
GetSysColor
DestroyWindow
CreateWindowExA
DispatchMessageA
EndDialog
LoadIconA
GetClientRect
DialogBoxParamA
TranslateMessage
SetWindowTextA
PostQuitMessage
GetWindowRect
MessageBoxA
SetFocus
GetFocus
BeginPaint
GetMessageA
ShowWindow
DefWindowProcA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 692KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ