ee8f6a96caf8f6f2d8ce5f2fe73fa403_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee8f6a96caf8f6f2d8ce5f2fe73fa403_JaffaCakes118
Size

25KB
MD5

ee8f6a96caf8f6f2d8ce5f2fe73fa403
SHA1

45b3cad1c36757359909ee9dbaa2b58d9b11f85f
SHA256

91b76f5c0743841ae9885b69b5dca5ab406758345b3a8f766a0f76141565d1cb
SHA512

9fe8ae539b45af46bf70d37c84eb6e8f2aeaeeeb4d0d1b2469a5967098fee1c173a2cefa8d198dcc5b94f66e3f890be759a8ba2fbdaca12568d3ce79b2a65912
SSDEEP

384:Hie3KrDkCYUFw0jQtJ+/BJrwZw6qdJFO93YF1pur0EUFAa1qSx:HCDkowBtJkJoeJs+nur6AUqK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee8f6a96caf8f6f2d8ce5f2fe73fa403_JaffaCakes118

Files

ee8f6a96caf8f6f2d8ce5f2fe73fa403_JaffaCakes118
.exe windows:1 windows x86 arch:x86

157b6b6b2d3b833400a9d1a156399a84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

shell32

Control_RunDLLW
StrRStrA
SHFileOperation
SHEmptyRecycleBinA
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

gdi32

GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
GdiStartDocEMF
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

Sections

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE