2961606ea5386159f6cfa3107d537d7c_JaffaCakes118 | Triage

Sharing

General

Target

2961606ea5386159f6cfa3107d537d7c_JaffaCakes118
Size

47KB
MD5

2961606ea5386159f6cfa3107d537d7c
SHA1

fc2edeebb2dd1be8c597ff4d4dfa2e9c306b14ed
SHA256

b63f291443be2a341627068afa3cb0d9186f546e67d6281ac986b73efd564da3
SHA512

23d4e7068c1bd023d1bbb69f33d8bc87679b22865c72e63ecdb6fe975db95af696ad3e4993ee1d0d0f8751bc45d1d2cee7110788610b15cde78ffebd142f452f
SSDEEP

768:QIlwHEgjS/n8pIBqROUISdBtEBLfivXUPg0/agqdsn7ezaLM+dliazin:hSQn8mBXNyfYVaYKzaLfrdM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2961606ea5386159f6cfa3107d537d7c_JaffaCakes118

Files

2961606ea5386159f6cfa3107d537d7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad590198dadfbfd64f2d98848ec78741

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FlashWindow
ChangeMenuW
CallMsgFilterW
CreateMenu

gdi32

FloodFill
PathToRegion
GdiStartDocEMF
RectInRegion
GetDeviceCaps
PtInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

shell32

SHGetMalloc
StrChrA
SHEmptyRecycleBinA
Control_RunDLLW
SHGetDesktopFolder
RealShellExecuteExW
SHFileOperation

Sections

.text
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE