69e12b640095827ad737f2e1b5d6ab4e_JaffaCakes118 | Triage

Sharing

General

Target

69e12b640095827ad737f2e1b5d6ab4e_JaffaCakes118
Size

21KB
MD5

69e12b640095827ad737f2e1b5d6ab4e
SHA1

d6ec19618b3c17d3b5372fb99e2a64328ec6bd1e
SHA256

a112947149c4ad78f2cdab134cc12b4ed8e44c2ddb533aa002ba8872be0432f2
SHA512

cc828a83780fe975d47203faec0afa3533936eeb2f1bf7d25cbdcea6347e3e154a949e5c27506f2ae7561b07d37e70c68abdf66979e00700af050f3ae1eef7f7
SSDEEP

384:DhpRH1X6tY8p1xvWtzFWMnevlHzKDS/CSKTQ69lco:fh8pP+tzFlslTKdSKTQglx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69e12b640095827ad737f2e1b5d6ab4e_JaffaCakes118

Files

69e12b640095827ad737f2e1b5d6ab4e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

313a383c9ffd446a1d956ebd8fbe8a9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 945B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE