4d46c15ecd6cf2098ab4a33c740e07bf_JaffaCakes118 | Triage

Sharing

General

Target

4d46c15ecd6cf2098ab4a33c740e07bf_JaffaCakes118
Size

14KB
MD5

4d46c15ecd6cf2098ab4a33c740e07bf
SHA1

586fa96cbd753e5cc28a227f74804d7318174ac1
SHA256

5d9d79da6f76d967f566c4f8e83499430712cc43faf6fe005750e50c864d4d50
SHA512

edc5951378035aa80d0480f9d73b7615ae05aeb1056b749108b59f1e456be86bb5c7658112ee22afb59968484c74c0f8f09b35e473b3548eff8ac29c2f2ae779
SSDEEP

192:TWECK1FFOoOcGOoARifJp8qdxdtfeQMR2pmpu3T0cTIEkKcUqfv67JvG29KXcpSx:TWMfF4ln42pmpu3TZGKcUV7ZxJelBVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d46c15ecd6cf2098ab4a33c740e07bf_JaffaCakes118

Files

4d46c15ecd6cf2098ab4a33c740e07bf_JaffaCakes118
.exe windows:1 windows x86 arch:x86

07256d5a6442a0e355c7c36091d4c4de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE