7860d9c78a49d86f1ce0787d4f009299_JaffaCakes118 | Triage

Sharing

General

Target

7860d9c78a49d86f1ce0787d4f009299_JaffaCakes118
Size

28KB
MD5

7860d9c78a49d86f1ce0787d4f009299
SHA1

8022d5f8259ad65716de0748578c79660c620a60
SHA256

92714fb293eae18d75110dc46a051fad80f4ace2540a190d167188d7651a649e
SHA512

14a94799a84da2d2bc3c2a2add5b9f772563cf7db6565ca58c0269b433e16a8d81ac943e59bfd6341ea617c049711b4f01bb1a3c0cee07f273331977f739286a
SSDEEP

384:I+I7S0QgtKzSTXWYwU4jtOQzt03AEsejm0ucgTWyaeNCIL6OBVvoOik58vcUk6U7:IXB7KzSjdw90QzBxWK1Fow8006axG2n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7860d9c78a49d86f1ce0787d4f009299_JaffaCakes118

Files

7860d9c78a49d86f1ce0787d4f009299_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62f93de30dba84ee8bdb23fe4335d580

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PathToRegion
PtInRegion
GdiStartDocEMF
GetDeviceCaps
FloodFill
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

user32

ChangeMenuW
CallMsgFilterW
CopyImage
CreateMenu

shell32

SHFileOperation
StrChrW
Control_RunDLLW
SHEmptyRecycleBinA
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

Sections

.text
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE