f642a88085e9315781c7530b08a03799_JaffaCakes118 | Triage

Sharing

General

Target

f642a88085e9315781c7530b08a03799_JaffaCakes118
Size

46KB
MD5

f642a88085e9315781c7530b08a03799
SHA1

0702d39e230f19f6df26653ec33f0f47cb90fecf
SHA256

47e18d13d3ad1e0ff76e38b06ab89dd1c45c89a0ca0abcc4c2b000785bfc0e18
SHA512

68e13d0606216db4030620737759a0090bb301d398a5acca143f6f65241da9f0dd8b079364d28a9ecc1d13cbc2ae977be7ccf65745f8c2ca492f0c1b8db3a171
SSDEEP

768:8k/Q+BNjwcCPdC9takSFdXJOJha7jHRdK8r+n6XPZHLxycCphOozQZyc5WJlrLGy:8k/QcC+aF1IJw7jTx+n/ciYcc5u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f642a88085e9315781c7530b08a03799_JaffaCakes118

Files

f642a88085e9315781c7530b08a03799_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af76398e982e0d9c46c7858d9779590a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateCaret
EndPaint
GetActiveWindow

shell32

ILClone
ILFindChild
DAD_DragEnterEx
PathIsSlowW
PathResolve
SHFileOperation
SHGetNewLinkInfoW

gdi32

CreateCompatibleBitmap
DrawEscape
CreateColorSpaceW
Escape
FillRgn
GdiFlush
GdiPlayJournal
CreatePen
GetBkColor

Sections

.text
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE