04b92490d7faa40784fef1782d82e920_JaffaCakes118 | Triage

Sharing

General

Target

04b92490d7faa40784fef1782d82e920_JaffaCakes118
Size

264KB
MD5

04b92490d7faa40784fef1782d82e920
SHA1

bab948128b3e377cd7fb56b18a9d8152f554183d
SHA256

6ab197af1e45620915b1f33246bbafce19ca2fedbdab8299e6c6d1022d7d2d7f
SHA512

f78d849a34f1f74246a5a3c66b4981fb43c949fde3f2e1e3eefbf789e0efd71f3ed57977ecf591529ecf5c49a3d211b1cbaae2d75675e62cd47ab713a75c961b
SSDEEP

6144:I11no9UvEy4FzmIXNYibNZu+RU+eOQjAYL2j:krvE1FzmIX6ipZu+eOlYL2j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b92490d7faa40784fef1782d82e920_JaffaCakes118

Files

04b92490d7faa40784fef1782d82e920_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 180KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE