fc420154a891936f869b64ffb7ea1126_JaffaCakes118 | Triage

Sharing

General

Target

fc420154a891936f869b64ffb7ea1126_JaffaCakes118
Size

16KB
MD5

fc420154a891936f869b64ffb7ea1126
SHA1

b95040ef7d36b469da4ec27eb56b926ddc54c3b0
SHA256

b54f1ee2af7f7b898e42337896c61557c03ba01f0405c02bf76f6d09b694d626
SHA512

d6a6b20ac2c0302cc20e028402a6c9c246320475b601e341ed725d0906f286119fe177d02ccdae65622826b3f45ab9c1334cad8df462dea78090c59dd9320f0c
SSDEEP

192:P2T/c0b7UfstZdrLwTWE8UTb4ZeLsQB7zrtx084RAwmF1Ilbdx9BQTp4:POZUYZ50130mBRclaTe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc420154a891936f869b64ffb7ea1126_JaffaCakes118

Files

fc420154a891936f869b64ffb7ea1126_JaffaCakes118
.exe windows:1 windows x86 arch:x86

232c016b1f294a86b687e35475f4c56e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_atodbl
__unDNameEx
_clearfp
_control87
_ctime64

shell32

SHGetDiskFreeSpaceExW
SHGetUnreadMailCountW
SHFileOperationA
SheChangeDirA
SheGetPathOffsetW
ShellHookProc

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE