3274fb187f82730c4a67c7549f7b9939_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3274fb187f82730c4a67c7549f7b9939_JaffaCakes118
Size

444KB
MD5

3274fb187f82730c4a67c7549f7b9939
SHA1

ed97c037acd81b0679ec993444e3e8ec7450e5a1
SHA256

04328eae6d417cfb496ec46eb9c64e76aa79dcdc700c7635ac5fb6cf4217a2b2
SHA512

8f1357a42ccdac2eac4dd28b7bcf8d125fa2be328b847ca4184ee70278a2f54ddd43a69b7084e6ab64cd209bced1797355e401ab826c0dc5cab909c8f4a778fc
SSDEEP

12288:aNhXC5uinqB6wM0tgBlJfd+6oBaNBOXC3ALpMThvVJTMitf:8SqB6wM0tqp+694yZDJT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3274fb187f82730c4a67c7549f7b9939_JaffaCakes118

Files

3274fb187f82730c4a67c7549f7b9939_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 352KB - Virtual size: 863KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE