ed36bf75d9c5e22329cd3db93bfc1d70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed36bf75d9c5e22329cd3db93bfc1d70_JaffaCakes118
Size

46KB
MD5

ed36bf75d9c5e22329cd3db93bfc1d70
SHA1

4e3f749536ad4d07535661ed366b5db10fbb251b
SHA256

cfa0579986edcd0f176db16c58f7381cf55b46fb2d926895048b83253961fe44
SHA512

60165972b3fba91cb091896b4a9c556218dbf46d66acea33eb4f84cf7dacf053113d29e708f375fb9c54d324ba6d8a1fbb3644e1aaa0eee56e723a3481b01b48
SSDEEP

768:OjZOMFloi8k9EuM2paQN1noXu6Cx0rqva31MgUWfn5vvEGDxn47v0p5wa:OjZ0i8kOpRu6ij81Bvrdrfj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed36bf75d9c5e22329cd3db93bfc1d70_JaffaCakes118

Files

ed36bf75d9c5e22329cd3db93bfc1d70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

157b6b6b2d3b833400a9d1a156399a84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

shell32

Control_RunDLLW
StrRStrA
SHFileOperation
SHEmptyRecycleBinA
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

gdi32

GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
GdiStartDocEMF
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

Sections

.text
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE