a0a9551f91d95677c865413252413b29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0a9551f91d95677c865413252413b29_JaffaCakes118
Size

7.5MB
MD5

a0a9551f91d95677c865413252413b29
SHA1

00117ddf0bdef71eabd473016cbe071ac662a8f4
SHA256

956eaeae098674fa91dff38cbb12d27c77bab479a1cd0cc4058492cba7e1827f
SHA512

74142b63bd0e023a2324e2a84914a382405c9e5d8e86c70a8c1ef2ce8c8b1eb2e67d1e7443759fa958e79e0d22d7ea2e0ef7aec758bbab71f84c0ed6c4f19da8
SSDEEP

196608:PbK9kYwUjAyj/nMY7TjkqM/jmvjfaiFLzeucf:Pbs6enMYDk/jMjfagLze/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0a9551f91d95677c865413252413b29_JaffaCakes118

Files

a0a9551f91d95677c865413252413b29_JaffaCakes118
.exe windows:5 windows x86 arch:x86

41f5c63f802110bf09ae0929a3141088

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

CreateMenu

advapi32

RegCloseKey

ole32

OleInitialize

oleaut32

SafeArrayCreateVector

shell32

ShellAboutW

Sections

.idata
Size: - Virtual size: 7.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE