5e5a46319d8ed1ace8099746ba75d8db_JaffaCakes118 | Triage

Sharing

General

Target

5e5a46319d8ed1ace8099746ba75d8db_JaffaCakes118
Size

24KB
MD5

5e5a46319d8ed1ace8099746ba75d8db
SHA1

86a384c611b715e205f7d9261f6fbf1093e0e510
SHA256

78a049637d4ad23ffa9e314db4677d50d8a4376a25c55a9ee640f53e697fb5bf
SHA512

1b0ae5de31a05fc9e1591a9e27822bca2ca2f8c1ef765e76ccd07d11a3905a95e82dd4cfacfa190bcb2d61f7fabeea422a03752bea1c2a494eb8e9004ad4201a
SSDEEP

384:1Lhw6WHlkPxzVjD4KE4egLLSkZcHuGqRCUPeairmvPKfgKQcjtdP7nnkAWy:1Lhw6fOKE7TEnRCUtirmvHKbT7P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e5a46319d8ed1ace8099746ba75d8db_JaffaCakes118

Files

5e5a46319d8ed1ace8099746ba75d8db_JaffaCakes118
.exe windows:1 windows x86 arch:x86

42e65191410381fcc3d72ff2bfafb6f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

gdi32

GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
GdiStartDocEMF
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

shell32

SHEmptyRecycleBinA
StrRStrW
SHFileOperation
Control_RunDLLW
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE