1618b0f6543552b5eb86441296b3132e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1618b0f6543552b5eb86441296b3132e_JaffaCakes118
Size

28KB
MD5

1618b0f6543552b5eb86441296b3132e
SHA1

1c4346989a63b22e86ffdef13da6f0707bd9aef8
SHA256

cb563102d29191d75b238396b9b94371fd1cddfa5a44011d08a80a5a6ccbb3bf
SHA512

c4f22559496e88299211a96b8f9f93cd5e96d2f1f4da321e6d6c5e8322f8d523e95bfcd415027911c446cd07b548c4d3ff54cc2f3bc683c89de811bef68369b9
SSDEEP

384:ALfNgfmXq6Cl7jMIbbpdPAz9CUF//zNT/pgEQkDLIfsZZzOcIIX4EV9ShyaaqHPS:afNYfJjMEPqCUF3zgEbNNPIhauxHUz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1618b0f6543552b5eb86441296b3132e_JaffaCakes118

Files

1618b0f6543552b5eb86441296b3132e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1747febe73b5740bf6b28ac7067b155

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateColorSpaceW
Escape
FillRgn
GdiFlush
GdiPlayJournal
CreateCompatibleBitmap
DrawEscape
CreatePen
GetBkColor

user32

CreateCaret
EndPaint
GetActiveWindow

shell32

Options_RunDLL
ExtractIconEx
DAD_SetDragImage
StrChrA
SHGetSettings
SHFileOperation
StrStrIW

Sections

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE