f2271c6c1c9704c67c8bbffad9473601_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2271c6c1c9704c67c8bbffad9473601_JaffaCakes118
Size

360KB
MD5

f2271c6c1c9704c67c8bbffad9473601
SHA1

4580e8007bb68fb62b7048a3b18d818626f24d09
SHA256

d5b1855965c76ed020f5c7cd430e6af457645c068deddd187fe11f1a74423fe1
SHA512

34fab78d0da84f50f939c479b069ce7b7b1abc7cece7f97192c3a8611230d4aed3bf235beacce82ce5d3f3f603c322a961dd41de8e7886b3995514c43e12823c
SSDEEP

6144:BZXeZh6go2L7WO3yXfhu1Kx3xPfyNveA9q0cBkFNjVw1e2nGIC6Jg3D13he:bytirPhIKx35kvOfiIe2GICTDpg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2271c6c1c9704c67c8bbffad9473601_JaffaCakes118

Files

f2271c6c1c9704c67c8bbffad9473601_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 132KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ultra
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ