17deddab29f14a38194530f1c6c5f896_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17deddab29f14a38194530f1c6c5f896_JaffaCakes118
Size

492KB
MD5

17deddab29f14a38194530f1c6c5f896
SHA1

a46f966d95cc2180acc22c70a2dc8eaa6571c90c
SHA256

dd0e6d18e546c3751407b97a37ba21523b44d0c67fd10021ae9be0ad043706a3
SHA512

7a544ace56de0fba0a0b89e9ed65c00228c5b9f22a7cff7988dc6fbd141d3980d4b5b8b37e9058a53548455c25720e560e93495b002386542a1079e25d5d5b30
SSDEEP

12288:Lgi2JtPx9kt6kFKBhnxdN8gQUSfNufioCjOwKFaof:Ei2TPKNwBhxiufioCawFof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17deddab29f14a38194530f1c6c5f896_JaffaCakes118

Files

17deddab29f14a38194530f1c6c5f896_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e86670b4de8ddfbcc73bb9da94882a18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
ExitProcess
HeapAlloc
LCMapStringA
HeapFree

user32

CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA

ole32

CoMarshalInterface
CoUninitialize
CoRegisterClassObject
CoInitialize

Sections

.text
Size: 404KB - Virtual size: 970KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE