fa58460c4113709e605ae83e8dfbfd7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa58460c4113709e605ae83e8dfbfd7c_JaffaCakes118
Size

21KB
MD5

fa58460c4113709e605ae83e8dfbfd7c
SHA1

21ca3967d992844d21cc470ce69dcc9ad1d1cd36
SHA256

1574f59bfe42e63f876a90b8028b0e03d0fbca7a08dd268785d74985ece0ee3b
SHA512

f7e6818ae4a288696a3662c55406ed6ca931c463da390907c0a9d177277b077e130dd4b852100fc21afa1ec80b4d2cca4f1b753e2726b5b43e874fe7736effbb
SSDEEP

384:xEDv2h9RyZPr0c9PszC9GnaBNpCPLfGPy+/8Z2tQEXM328n9V3:xEDvIurx9szC94YPy9Z2trMFn9J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa58460c4113709e605ae83e8dfbfd7c_JaffaCakes118

Files

fa58460c4113709e605ae83e8dfbfd7c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

581f14067269d32de70cb655127d39f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
StrRStrW
SheFullPathW

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

kernel32

GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc

Sections

.text
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE