21fde7d82e245853cf76f4ed879e658c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21fde7d82e245853cf76f4ed879e658c_JaffaCakes118
Size

24KB
MD5

21fde7d82e245853cf76f4ed879e658c
SHA1

3d7e2eef54f97b6c6ae59ad2840830280811008f
SHA256

7162d4023a3d48f4ea6fcc66c2670d1937eced682f9a3b2268519efbe9737943
SHA512

0a6266aeca84f903e42e8a90f5dee459b4f1caf0aa926e19155ddce87c8f9def189cb8668384261f47d1c8b2a4a1d4b5d2a53654210c2b79d4ef861f29a56fd8
SSDEEP

768:3a/GuZoE7NUjbZqIlSrtxfCzwSYJukdoc:EZogNUjbXat9CzNIoc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21fde7d82e245853cf76f4ed879e658c_JaffaCakes118

Files

21fde7d82e245853cf76f4ed879e658c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

8a117924cb77e48b09ec7edf05143f33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
ChangeMenuW
CallMsgFilterW
CreateMenu

gdi32

GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
ceCaps
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

shell32

SHEmptyRecycleBinA
SHLoadNonloadedIconOverlayIdentifiers
SHFileOperation
Control_RunDLLW
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE