239207dd3373c7df01e5b1e8671b28ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

239207dd3373c7df01e5b1e8671b28ca_JaffaCakes118
Size

223KB
MD5

239207dd3373c7df01e5b1e8671b28ca
SHA1

26644363a485984760edbf787fbaa524b6752d22
SHA256

2dd503e19343065aa24cc76c0c61f685ec864241dd6f20e98ffc1c9a86a5b17d
SHA512

91c2747504f737c39e9e5b43f05d325a0ca1be20d4b9f00e3d18d15f9a31c0552b92be80114a36d2a3a0eecf9d8d14cde3096d9b085eef468026bebf0605bcb6
SSDEEP

6144:RdTDYxobThJS3P0CIc9bouQLiYoq+1kTXQBaa:RFSuJcPRIAbNN5+XC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
239207dd3373c7df01e5b1e8671b28ca_JaffaCakes118

Files

239207dd3373c7df01e5b1e8671b28ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 128KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE