21c5a35ad43059b7880d88d426daf53a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21c5a35ad43059b7880d88d426daf53a_JaffaCakes118
Size

34KB
MD5

21c5a35ad43059b7880d88d426daf53a
SHA1

49fe32c0e151cdaa1ba8639ef42db55fae3d0117
SHA256

86e612f0153b864612ec044e2fee2524f6e5b782aba4d385468262ebca19d9e8
SHA512

cba1e3ce26a2da83e58d3501936b67656695e989e69c6bd1637f3cc212be410381f7e20052da14c2ded2d17561f07d5077689c1e49dd81521567fb7756803773
SSDEEP

768:GStr+dJL3+ce1vGVjpvprU0wf1Qqwgf6oS:LJ+Rn+0wf1Ln+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21c5a35ad43059b7880d88d426daf53a_JaffaCakes118

Files

21c5a35ad43059b7880d88d426daf53a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e78685086b246424eafa8d21153ff5b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DrawStatusText
ImageList_GetBkColor
ImageList_LoadImage
MakeDragList

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
LocalAlloc
VirtualProtect

user32

EnableWindow
InvalidateRect
OpenClipboard
SendMessageW

Sections

.code
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 19KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE