37c0dcbee3483301679f6ad59d7a3087_JaffaCakes118 | Triage

Sharing

General

Target

37c0dcbee3483301679f6ad59d7a3087_JaffaCakes118
Size

25KB
MD5

37c0dcbee3483301679f6ad59d7a3087
SHA1

81e1f8aa948b17ca5990f3284bac18c1c6b7b28a
SHA256

7f1a0146f59a72189d9cb3816f00ba0dbff24e71042a97270b9ad915bb0eb56d
SHA512

149ec3f44599d2d11f6eaf0f89ae9a0a314bfb39e6170a6dbceae29a6278048cb91858d586166b150c03ff0aef191fdfe3b69440770d43ef70603588c6383074
SSDEEP

768:w//CX8owXDclMqoRfaH61ETwMDtssUGFKRY8ZGo:Q6rlMqotaHRTZhss7FOzUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37c0dcbee3483301679f6ad59d7a3087_JaffaCakes118

Files

37c0dcbee3483301679f6ad59d7a3087_JaffaCakes118
.exe windows:1 windows x86 arch:x86

af76398e982e0d9c46c7858d9779590a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateCaret
EndPaint
GetActiveWindow

shell32

ILClone
ILFindChild
DAD_DragEnterEx
PathIsSlowW
PathResolve
SHFileOperation
SHGetNewLinkInfoW

gdi32

CreateCompatibleBitmap
DrawEscape
CreateColorSpaceW
Escape
FillRgn
GdiFlush
GdiPlayJournal
CreatePen
GetBkColor

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE