005032b5ee0246b7509125016d7e587b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

005032b5ee0246b7509125016d7e587b_JaffaCakes118
Size

24KB
MD5

005032b5ee0246b7509125016d7e587b
SHA1

f7e5d396a7fcae6a5854f1695a2af11f49bbe69f
SHA256

15390b34c91c90699a12581591b5a30b423c1ee5960fef5f120873789e9ae57e
SHA512

bf204c0b10bdba52350b2369ec6b89cdcd04c8ffcae18304beaea43a6ea817bc51759bcd313b5ebe3d96bf94f2ee5bfbbbbcc7dbe8f4277d1b0b00d0698a0074
SSDEEP

768:VfGP7DKB8gK8WYu7UTbhUZObaPwSuc7ZhRn:Vf6cvL/cU/hUZObGvucFn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
005032b5ee0246b7509125016d7e587b_JaffaCakes118

Files

005032b5ee0246b7509125016d7e587b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

acabb51805e9d6327d72ccb258804103

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiFlush
GdiPlayJournal
CreateCompatibleBitmap
CreateColorSpaceW
Escape
FillRgn
DrawEscape
CreatePen
GetBkColor

shell32

Options_RunDLL
ExtractIconEx
CallCPLEntry16
StrChrA
SHGetSettings
SHFileOperation
StrStrIW

user32

CreateCaret
EndPaint
GetActiveWindow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE