f93dd25dff3dd4aa670bb502ee7b3119_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f93dd25dff3dd4aa670bb502ee7b3119_JaffaCakes118
Size

16KB
MD5

f93dd25dff3dd4aa670bb502ee7b3119
SHA1

e0a86a682e131bc8995ed12dd746403faada3c8b
SHA256

89ab4301de8feeb242ca585910a0d118defb7e0688c9783f3197413c60142d06
SHA512

b0766162d8a414db1c0d249cbeceac85632a25b52704ea069204e7d362c0130fe8e1ea6b6fab7e6f06090c08e43cc26f3d3e459163b9fbe31fbe8ba1a55e8361
SSDEEP

384:TGWdnWJ+ri7rCXLSK8EpvnCaaOvSIczxQmhG0AhNVnj4d3hu:TGv8iK2K8eK8qIoQmhwj4d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f93dd25dff3dd4aa670bb502ee7b3119_JaffaCakes118

Files

f93dd25dff3dd4aa670bb502ee7b3119_JaffaCakes118
.exe windows:1 windows x86 arch:x86

6764baeb8d960aa00c9977cb9882bb94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE