01d06fea75901d1ca1d273b89debc367_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01d06fea75901d1ca1d273b89debc367_JaffaCakes118
Size

14KB
MD5

01d06fea75901d1ca1d273b89debc367
SHA1

18fa5b8e61eba4edd7965976292a392bad9ca87a
SHA256

4133d5a1f9e001b5476ac24f747ff51af756a71f81b508277c35e063efbb45a5
SHA512

d78376243a364cc72410a482672e2da7d5c7054accbe41bbb3730445bd50ef3c7f2c1af5b4b379f44d3381d7e34efee1b963cdddde723e0351425150e021390a
SSDEEP

384:CJv2OXOhO4QvfgNf5vfDQlfe1ogMV6L9kVv:6LXOhJ4gNf5k21Dy6LCZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01d06fea75901d1ca1d273b89debc367_JaffaCakes118

Files

01d06fea75901d1ca1d273b89debc367_JaffaCakes118
.exe windows:1 windows x86 arch:x86

07256d5a6442a0e355c7c36091d4c4de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 617B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE