17e8902e1ae6300862ccf13b66ca63f4_JaffaCakes118 | Triage

Sharing

General

Target

17e8902e1ae6300862ccf13b66ca63f4_JaffaCakes118
Size

97KB
MD5

17e8902e1ae6300862ccf13b66ca63f4
SHA1

feb29c1ad1ad887a0cec9d67f06a4153ba138985
SHA256

80e9c0bb8b16239c56233d94bea276b98281781b026d3739a79002ad80b6a14f
SHA512

0e8bb5133687b616f690415f458ce0c469ffbe3d0ff6e8c73af0d39c28c938dda0cac6c953d3d043e9c23f73c958b9e560e801b7b29aee4e936a90ce9b8707fc
SSDEEP

1536:RZGF9CYn4V+gzK9FvjxyWU5fXiG4VpzUNXLw0iEgCohRGS7p0B7gn:RcFLnwM95FnU5fEzYliB579n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17e8902e1ae6300862ccf13b66ca63f4_JaffaCakes118

Files

17e8902e1ae6300862ccf13b66ca63f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71879b7f84216673b5a7d0d5ab3c9870

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
lstrcmpiW
GetUserDefaultLangID
GetDriveTypeA
GetProcessHeap
lstrcmpA
VirtualAlloc
MulDiv
GetVersion
GetConsoleOutputCP
CopyFileA
VirtualFree

gdi32

CreateSolidBrush
SetTextAlign
SelectPalette
RestoreDC

user32

CharNextA
GetParent
GetSystemMetrics
GetDC
ShowWindow

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 893B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Ygxbwkpb
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ