eba46aa71c467e85d8270c6edb081e2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eba46aa71c467e85d8270c6edb081e2b_JaffaCakes118
Size

240KB
MD5

eba46aa71c467e85d8270c6edb081e2b
SHA1

7de942286a32bd97168f456ee2fb72fd0e164972
SHA256

c1ec909bd459b1be24b9e0c883c44a2c5235b03eee048f1bb726caa4bb26d386
SHA512

32be7efb1d50a3eba9c5a774717c3d4a8a44ca85e7734f8720328fcef20b85396ef1e9e3195f4a298a83ec23fccad7da360d53e66fda4f573284c091a45e917e
SSDEEP

3072:mIovIdU/MQptN/RRSnBpICMTqazQYgEAQIIOraBIpPQMPoXqNQN3xVhDto3UDZ:WA9QPNJR8faciAdraBCDohjhDrDZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eba46aa71c467e85d8270c6edb081e2b_JaffaCakes118

Files

eba46aa71c467e85d8270c6edb081e2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 76KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE