49b531e5dfcc3b391912b657f1f134e4_JaffaCakes118 | Triage

Sharing

General

Target

49b531e5dfcc3b391912b657f1f134e4_JaffaCakes118
Size

22KB
MD5

49b531e5dfcc3b391912b657f1f134e4
SHA1

b418fd62d5397675a288b67981cd496c9f7221f8
SHA256

263f36f2eb8110841b2b198d5d226a9a25f218c2b87184895d484ce4cfc41fd3
SHA512

b6a1a32d2d06c55661ba7954e786882935c3be34bb824d9aa06b562efd36c1f3fe219293eb79848c7bccea38a950336f308df5f09be8ba234a7149de34f72e9a
SSDEEP

384:Bj1nlK2Qy+hiFJ5L/Er08thcVM8+pyyu6yr9jeMld/0CBt7:Bj1fQW7scrWyyu/r9/llh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b531e5dfcc3b391912b657f1f134e4_JaffaCakes118

Files

49b531e5dfcc3b391912b657f1f134e4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

157b6b6b2d3b833400a9d1a156399a84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

shell32

Control_RunDLLW
StrRStrA
SHFileOperation
SHEmptyRecycleBinA
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

gdi32

GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
GdiStartDocEMF
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

Sections

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE