b4a51fad8ba740c567f4eebbb18ab720_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4a51fad8ba740c567f4eebbb18ab720_JaffaCakes118
Size

14KB
MD5

b4a51fad8ba740c567f4eebbb18ab720
SHA1

fb75882232754ea11163c628d3193ec5e53b599e
SHA256

826017fb8e838689e6b8486d0be9a7256db24a1c4c17226411db32d733d0143a
SHA512

d5c2771a9fdf47b362af1dcfffdf8515802d7bc63048742f06421cdd1d35458e103e3567924bb81dcdbbeb8e80ac069228f047b99d070378555e93923a74c6cf
SSDEEP

384:e2psiPW2naIvORH2FS64bLoAvmhje9TCaxEDB:RY2n9vIF64bLPvwe9TjxIB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4a51fad8ba740c567f4eebbb18ab720_JaffaCakes118

Files

b4a51fad8ba740c567f4eebbb18ab720_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2667e22a4669ffb6e59edb0e759113d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetThreadLocale
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 222B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE