ec8ccc3e0e3c06102adee7853536bce7_JaffaCakes118 | Triage

Sharing

General

Target

ec8ccc3e0e3c06102adee7853536bce7_JaffaCakes118
Size

131KB
MD5

ec8ccc3e0e3c06102adee7853536bce7
SHA1

132ba6edbfade72143b7c3b3fa63132f29607172
SHA256

36e0d014a6a0d30e53cfa1e4a9ea996e7121993c5c6a4b458d589187dc49dfc1
SHA512

8929b477b3c4d9e7dc1d106aa5100bf5c2815e08b8ef1a6cb66c8943e552178ef4ca983b6937e95b09708b1d1e517236c21d00a028025e3fec6e70972af1e3b9
SSDEEP

3072:AA88DSt65seAHR7RPFuLUjR1BU4e+Sf9bz7RI:phTeHHJRPFyUlPi7RI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec8ccc3e0e3c06102adee7853536bce7_JaffaCakes118

Files

ec8ccc3e0e3c06102adee7853536bce7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

344db90f0bd7185c3f4ac1ea09ef8e2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDiskFreeSpaceExW
SHGetUnreadMailCountW
SHLoadInProc
SheChangeDirA
SheGetPathOffsetW
ShellHookProc

msvcrt

_atodbl
__unDNameEx
_clearfp
_control87
_ctime64

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE