057dbf7408b7e373b4ecdf2f4dd6411f_JaffaCakes118 | Triage

Sharing

General

Target

057dbf7408b7e373b4ecdf2f4dd6411f_JaffaCakes118
Size

25KB
MD5

057dbf7408b7e373b4ecdf2f4dd6411f
SHA1

441e48578edb4e90f3ef2e95671a1bad7b19aadb
SHA256

5d20c513e5705746d9f35107bc52ca5c7ad924bbfbb97d177367761d83f3da17
SHA512

8ce4ca9c9c8805464560a59b767f06311316f2fb2a850b5f206d9e3285a9a5c25de4e947e1c6176fc239f036a16405e7f87b6ce9e420b511653eccd176394ad2
SSDEEP

384:POqffyeZIVkaJAmge6kLqSo7GmXEtnIvBsN1oisPCGkld19Go/795PmPZS9mR6HV:POqf/6ykLqla7IvWNuPCGOdv7riWlH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057dbf7408b7e373b4ecdf2f4dd6411f_JaffaCakes118

Files

057dbf7408b7e373b4ecdf2f4dd6411f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33474628c7b7faf51e9b6fcb80bfe0ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

kernel32

GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE