1b2227d81fb9d7abafd3bc028f31d7d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b2227d81fb9d7abafd3bc028f31d7d5_JaffaCakes118
Size

119KB
MD5

1b2227d81fb9d7abafd3bc028f31d7d5
SHA1

1f7e5f2267f648bd8b34bf7b363585ae6442dde4
SHA256

a43a592c08ea9eed2ea66946082237c293d4c77e20ccd2f7186126755ebaf6a1
SHA512

207fe19a95128697b93848870a95ff2e8ff33db97d9e4a2e93e13cd90a9a1b046bc7cb81d016e28b044ba475fdf610bf6631d766b8ee832f94dcdc225c4cec74
SSDEEP

1536:zElG0UMEFJqfwUYc521jk0FYu5+XWiaVvTiuxV5rfWSItS/iWm7bh4XW3s:zX0DEFJoFYI21jRYb/yekt04/9ube6s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b2227d81fb9d7abafd3bc028f31d7d5_JaffaCakes118

Files

1b2227d81fb9d7abafd3bc028f31d7d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE