c149253c46d124c9e2d794ce20fcda08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c149253c46d124c9e2d794ce20fcda08_JaffaCakes118
Size

25KB
MD5

c149253c46d124c9e2d794ce20fcda08
SHA1

ab4b9d2b810ce992d27241617e3120dd2061d7a2
SHA256

2e17d881579ac5969aea022fa1f64a2a09a8af732b62522f5a4eb0b7a7477f0e
SHA512

0a328f69ff9a1e04aa2e2199679cc1497f96089902bfd7106fa26d550480b9edc362aab52ed44cabec531a9641999694f28fa63030e4df983e75810704161420
SSDEEP

384:wCI8dZzcBbK+MK4ogJda5wKm/du/uvhoT2Vq4O5wtoY193Cm:e+ZzcxK+RCda5w7hC2VqDwtoYXD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c149253c46d124c9e2d794ce20fcda08_JaffaCakes118

Files

c149253c46d124c9e2d794ce20fcda08_JaffaCakes118
.exe windows:1 windows x86 arch:x86

af76398e982e0d9c46c7858d9779590a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateCaret
EndPaint
GetActiveWindow

shell32

ILClone
ILFindChild
DAD_DragEnterEx
PathIsSlowW
PathResolve
SHFileOperation
SHGetNewLinkInfoW

gdi32

CreateCompatibleBitmap
DrawEscape
CreateColorSpaceW
Escape
FillRgn
GdiFlush
GdiPlayJournal
CreatePen
GetBkColor

Sections

.text
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE