0410974530f58d0362bdb8381fab3154_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0410974530f58d0362bdb8381fab3154_JaffaCakes118
Size

400KB
MD5

0410974530f58d0362bdb8381fab3154
SHA1

5fdb2ffbcfd9d95e8854240bc57e1c932b21461e
SHA256

f8e29f9d6421a427eaeb015d5bb5f620daad47d026677276faa077084f66a8a9
SHA512

31cee88e2ef724ecb7430c44db3bed298e9c2a51a1d518f20a61ea416014865884cf1475d71745f28e4833433ed01c3dcea013a780130b46ec411ecb39bacc70
SSDEEP

6144:8YFJoj+/FhCJKwdhNX7qU58U2v5Pqzvw8+MJkywFG9u9LU+UPW5ZxqvePIGA2L:XvI+/1YzWvPqzvw8+MUG0tKOseh9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0410974530f58d0362bdb8381fab3154_JaffaCakes118

Files

0410974530f58d0362bdb8381fab3154_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 320KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE