3e9c041410f31180fd8a034069b7f253_JaffaCakes118 | Triage

Sharing

General

Target

3e9c041410f31180fd8a034069b7f253_JaffaCakes118
Size

28KB
MD5

3e9c041410f31180fd8a034069b7f253
SHA1

70703b0f4150398c066b8878a059bc098d076474
SHA256

acc0611ea52621b4231fa8bff93decc73592c4c356d8c48e52c167be65c3b8e3
SHA512

54d56ba7e9a17acdae23344b473a9fd3bd4e2ed71ec3552b1e695f2e848251254242785749885553daa05ba15f755bd7a7c23f77f644b365fd2eef58d58c0101
SSDEEP

768:X9LdipAdeouQCs2nJrl5Kzadyey4GCALWIq/:NdipAdgs2n9KzqyerAq/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e9c041410f31180fd8a034069b7f253_JaffaCakes118

Files

3e9c041410f31180fd8a034069b7f253_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ac2ccf696d93c92566777915d7e6afe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateCaret
EndPaint
GetActiveWindow

shell32

Options_RunDLL
ExtractIconEx
DragFinish
StrChrA
SHGetSettings
SHFileOperation
StrStrIW

gdi32

GdiFlush
GdiPlayJournal
CreateCompatibleBitmap
DrawEscape
CreateColorSpaceW
Escape
FillRgn
CreatePen
GetBkColor

Sections

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE