edb663f8f8030a9ccbad2da32907c352_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edb663f8f8030a9ccbad2da32907c352_JaffaCakes118
Size

21KB
MD5

edb663f8f8030a9ccbad2da32907c352
SHA1

e7151d25c5de8d4e8b1efc067872f5fd3c98bccb
SHA256

b5638870e22897544ccc46f82688216eb1487bb7fa4b380a412812482f2cb9a3
SHA512

9d77421b8c30b0eb8fc8b220ecc7f70a2342f31fdf2a2aea11394f740383533bd275005ffcad462b123b6be0ac285cb0c0ac2ab13bce88247530bb32e3e011d9
SSDEEP

384:VEEtJ5uGdug55axfqliJEmHpw3h+eAFmmO8NMLOa8tY1jJc2:vft8laiJhJLk6MLtAG/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edb663f8f8030a9ccbad2da32907c352_JaffaCakes118

Files

edb663f8f8030a9ccbad2da32907c352_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a85f8952dc33e1e906e9660d9bfba631

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE