1225817358ceae60bb267209f8314da4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1225817358ceae60bb267209f8314da4_JaffaCakes118
Size

21KB
MD5

1225817358ceae60bb267209f8314da4
SHA1

5b16c58fa813dea8ad470852162358bd1975ed79
SHA256

dac096bb57a6f2552a1d91dedd00807fb37a80244478b88917738ee97eb967e4
SHA512

0701176b5e2f88039b46fe62ad3b5ea61bbdd74090f539b0f7e9fa1b85872a3b7ecbe2a87d59dc08615ee7f1dd0cabad2ba9597a79252bf30cd7079cdbcb0331
SSDEEP

384:AW0Ljo8VIKbiyH5LqOa1fQvffDy+Hox/OvH0v/5h2u0R4+COM2TUp3zAJ:QbeKbiyZw1fQvfvHeN/5doNCO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1225817358ceae60bb267209f8314da4_JaffaCakes118

Files

1225817358ceae60bb267209f8314da4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a0ab69c1c030aee5cc30d375984f6b79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

StrNCmpIW
SheShortenPathA
SHGetUnreadMailCountW
SheChangeDirA
StrStrW
ShellAboutW

msvcrt

_tell
_mbsrchr
_memccpy
_mbsnbcat
_purecall

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE