fa19ca3cd6edcd9c2183c608be47f417_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa19ca3cd6edcd9c2183c608be47f417_JaffaCakes118
Size

14KB
MD5

fa19ca3cd6edcd9c2183c608be47f417
SHA1

f821f2544934df1788ec11b8827828175902c54b
SHA256

12db82accc05f04eb249612a4ac6cec28ff90460930cde7f8019d8287869ce67
SHA512

8a45596ca4fb7be8651b24c5b36af4517aabd164e5389da8df89ce66733c76cd49340baf658069f80358d49504663867c5159e49f051250e4f575511676acb6d
SSDEEP

384:j4qh2Ro13WhY1pKI6qyrsoiboMwhdB8PXCYDq:8qwRolWu87PsBsMwhYXC0q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa19ca3cd6edcd9c2183c608be47f417_JaffaCakes118

Files

fa19ca3cd6edcd9c2183c608be47f417_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2667e22a4669ffb6e59edb0e759113d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetThreadLocale
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE