f2c3a4dd664666b2725c2753b0ad8484_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2c3a4dd664666b2725c2753b0ad8484_JaffaCakes118
Size

192KB
MD5

f2c3a4dd664666b2725c2753b0ad8484
SHA1

c23956a7dad8cd1879b94401eda06a28b9302c67
SHA256

62acea3f0a2603b06374e6f20518f75ac6ddcba27b828a45d9f0c99f88027aef
SHA512

8a1eed9681c437463d151e5abaf6e33fa7506e7ab711ceb87cdd557aacda3171d29ba55957f30d5cd9a5c48d35df015d83c0cc4e1b256f3777a522a01c129844
SSDEEP

3072:7X+kaU7vtVJDegK9UBWpx/jBsbX6uPJyAUl3/7eYBwzkUptz3V2ndtMj7:7N971DeUBWpRBDL/76kUpx3YC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2c3a4dd664666b2725c2753b0ad8484_JaffaCakes118

Files

f2c3a4dd664666b2725c2753b0ad8484_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 76KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE