82ba16220de3e88adbf5e57484e88d25_JaffaCakes118 | Triage

Sharing

General

Target

82ba16220de3e88adbf5e57484e88d25_JaffaCakes118
Size

21KB
MD5

82ba16220de3e88adbf5e57484e88d25
SHA1

6b0b5b5c903879bb9917361e49469ef1ccdaf6e7
SHA256

11331755d045ded8f11f19d62daa70135c963e5ff0c46664380d155844137d8b
SHA512

479f12fbf8094b4838faf490c7a9b22c17916cd58de83a71b238ae87e607a83ce3c3ada10589fbb11a46536fe4e3ad57e4743e0ad3b3756bab016277a923259d
SSDEEP

384:ysDQuF7tA6HKizxseq2oPDxuxt3MpQ+rikDSfud4EqDqoD4:bDQuF7y2Kizx4tLkxt3OQMikuoRqDb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82ba16220de3e88adbf5e57484e88d25_JaffaCakes118

Files

82ba16220de3e88adbf5e57484e88d25_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2667e22a4669ffb6e59edb0e759113d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetThreadLocale
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 781B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE