27e9e1400707c8161327ae0dd2785964_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27e9e1400707c8161327ae0dd2785964_JaffaCakes118
Size

21KB
MD5

27e9e1400707c8161327ae0dd2785964
SHA1

e726736900cf29d72679b9bd4680c4217022b17c
SHA256

c14c690994e8b001d20a6b914722cbfa65e238078f9f2e593f8f67aae1135ffe
SHA512

9be20577c12e17d9066649e3c72f8bb6372db551a640f7341fc7702f1358797e8412e3a7124a7e7cc2c55d3430f9da80d40073e81e2abe1f8fe9c3655039480a
SSDEEP

384:6KA7/044V+au0gE9gELE/aX12iumLROexHhch:6j4V+axOELEuZRO8hc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27e9e1400707c8161327ae0dd2785964_JaffaCakes118

Files

27e9e1400707c8161327ae0dd2785964_JaffaCakes118
.exe windows:1 windows x86 arch:x86

313a383c9ffd446a1d956ebd8fbe8a9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE