17c18e04adc27cf83ee324a090f9d1dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c18e04adc27cf83ee324a090f9d1dc_JaffaCakes118
Size

120KB
MD5

17c18e04adc27cf83ee324a090f9d1dc
SHA1

09eb70a82a77836749ceafe62f26320cb04f52b8
SHA256

8b484171c9b1121dfbf3fbaca058a2d0cc5ed88fcea9c2bb174554bc5ba1b66f
SHA512

2534c694fbcdc5a166db34416069e34f5917ee3423082cc8bc719079683c2716518ec4cd977cd169eab6e9922a315addb1d8eb4920ba83f01d2ba1b4259b3a38
SSDEEP

3072:54TufwTkXs2Z/RNU/D5y7pViEhmoYcOPBu3G:54afoGs2NRNUsFZhOcIBYG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c18e04adc27cf83ee324a090f9d1dc_JaffaCakes118

Files

17c18e04adc27cf83ee324a090f9d1dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

364b6ea79d1c023cd3554d095c535e1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildTrusteeWithNameW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptSignHashW
ElfBackupEventLogFileW
ElfOpenEventLogW
RegOpenKeyA
FreeSid

gdi32

GetBoundsRect
GetCharacterPlacementW
GetMetaRgn
GetDIBColorTable
GetFontAssocStatus
GetMetaRgn

user32

CheckMenuRadioItem
CreateIcon
DragDetect

Sections

.flat
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 75KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE