695dcbbc2b5e91473eb0999eb42c7551_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

695dcbbc2b5e91473eb0999eb42c7551_JaffaCakes118
Size

22KB
MD5

695dcbbc2b5e91473eb0999eb42c7551
SHA1

143933e40daa0df44fd29636589aa983388a5671
SHA256

0757c860ffe23b241841bd132b02246a0ecbdebbeb15a20227beced320388348
SHA512

25f2ccf4473befbee5e3e2efdc8cc10fad7a53147b81a9e90ec0154dabd7b003a95d0cea65b21b2049aeb0844a1fed5a1d109d9a761e265ce527f2e6b6ae01bf
SSDEEP

384:b5pG7VVF3SfGtFo8/y6jbFmuFHaYjQEPpC27SGkbg9TIOAE0Vzcf9fVtV:bDGRVFJFjb4ukYcEPXSg9ESfJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
695dcbbc2b5e91473eb0999eb42c7551_JaffaCakes118

Files

695dcbbc2b5e91473eb0999eb42c7551_JaffaCakes118
.exe windows:1 windows x86 arch:x86

33474628c7b7faf51e9b6fcb80bfe0ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

kernel32

GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc

Sections

.text
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE