6fb8f420458c58fb8c09cfc6ee6ef6bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fb8f420458c58fb8c09cfc6ee6ef6bd_JaffaCakes118
Size

15KB
MD5

6fb8f420458c58fb8c09cfc6ee6ef6bd
SHA1

d88774cd1c4caa0c4dabda1631e87e23b5404249
SHA256

738842770c144a520a572353dc9b2e6979fcc27e401b906640e3b6fe1a4847e5
SHA512

c738d0885edf0bc495101cd017ebdff88f9c7296e466d4d68d5b0491bd3f7bf20d7eb6655ee9608c5dc4200da83e2550b5f1ec09baacbbcb695dbde816d95418
SSDEEP

192:mk7ANRg2Cjn9qGeBSfahx1JBEawsoToIl10VJen/tiyE+13RcU6di2SULbX2EbG7:mk7gfa9+kss+IjCCti03Rl6dJND1Vc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fb8f420458c58fb8c09cfc6ee6ef6bd_JaffaCakes118

Files

6fb8f420458c58fb8c09cfc6ee6ef6bd_JaffaCakes118
.exe windows:1 windows x86 arch:x86

33474628c7b7faf51e9b6fcb80bfe0ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

kernel32

GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc

Sections

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 704B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE