a28cadd947eea176ad1deb7e9a6e6917_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a28cadd947eea176ad1deb7e9a6e6917_JaffaCakes118
Size

28KB
MD5

a28cadd947eea176ad1deb7e9a6e6917
SHA1

d9237f80f23a1285b097ae98dbba0599c3132665
SHA256

261b8544b4e00e99c6eb3876c3d01b7c95d4eb25093df4ddf48450867522ee09
SHA512

9eedbd3cc6672779bd75cbb89ce4b7b80805a9390e6cc4476436555948e0cff8c591e443b577cce92c16c02a2452256d3e4c4544e70fd62f5e16272c4a205f26
SSDEEP

384:4YdY/FssLzUdsF5f9zWteyo6K1NnxJ3LmVSJO3ITs/tFdVh/6ywjnij8I1WI4/h:4zFsyzUdsFV1NHoI0D/YmwI1WD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a28cadd947eea176ad1deb7e9a6e6917_JaffaCakes118

Files

a28cadd947eea176ad1deb7e9a6e6917_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1747febe73b5740bf6b28ac7067b155

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateColorSpaceW
Escape
FillRgn
GdiFlush
GdiPlayJournal
CreateCompatibleBitmap
DrawEscape
CreatePen
GetBkColor

user32

CreateCaret
EndPaint
GetActiveWindow

shell32

Options_RunDLL
ExtractIconEx
DAD_SetDragImage
StrChrA
SHGetSettings
SHFileOperation
StrStrIW

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE