0418e7f95a8b94c035e10749234f8378_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0418e7f95a8b94c035e10749234f8378_JaffaCakes118
Size

28KB
MD5

0418e7f95a8b94c035e10749234f8378
SHA1

4962e78988d5bf11120eb238143479b3f6227d99
SHA256

d737196a3233c4de83e3f7f30fa3d34d94c4d68539e4ad983d4e94ee03e60ee2
SHA512

31a77ad844ea795f6d6ace7b0d2a9af405aa9d6998d92811da6062f1dcf390336ba384c35a75c3442fbfe23d84142cef589d9d99eaea3c66d6b32871615f68ff
SSDEEP

768:huFqaxScNXO4HOvCoy9oviEyJ9iV1OBF:kFqHqXO4Hmw9GY9s1OBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0418e7f95a8b94c035e10749234f8378_JaffaCakes118

Files

0418e7f95a8b94c035e10749234f8378_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bba92a8fb08104a14717124090e8f12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceCaps
PtInRegion
FloodFill
PathToRegion
GdiStartDocEMF
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

shell32

Control_RunDLLW
SHGetDesktopFolder
RealShellExecuteExW
SHFileOperation
SHGetMalloc
StrChrIW
SHEmptyRecycleBinA

user32

MessageBoxExA
CreateMenu
FlashWindow
ChangeMenuW

Sections

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE