046998d2f37ad63a6464ce40afea24aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

046998d2f37ad63a6464ce40afea24aa_JaffaCakes118
Size

28KB
MD5

046998d2f37ad63a6464ce40afea24aa
SHA1

1470290d7f783657697bd1a04d1feb7b417d164e
SHA256

a617beb93092037f42ed4b43bd1bc7eb98b19f480e8c3814de2e3ed6fcea8b1b
SHA512

aca5206758c127b14819a56557e3225ea2f4c9b239956c4c15cc48ae485e52860bbfa298a3ea98e1855c5251e4617069ec686447b04f4d8bd4b23f545b87d2eb
SSDEEP

768:CxSaYwkdaPbqpCSklx9/iG9qjU5nCZI0vAUGLSF:C1YujHX9/mY5nCo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046998d2f37ad63a6464ce40afea24aa_JaffaCakes118

Files

046998d2f37ad63a6464ce40afea24aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af76398e982e0d9c46c7858d9779590a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateCaret
EndPaint
GetActiveWindow

shell32

ILClone
ILFindChild
DAD_DragEnterEx
PathIsSlowW
PathResolve
SHFileOperation
SHGetNewLinkInfoW

gdi32

CreateCompatibleBitmap
DrawEscape
CreateColorSpaceW
Escape
FillRgn
GdiFlush
GdiPlayJournal
CreatePen
GetBkColor

Sections

.text
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE