32c660000eebe68c22378d2123514136_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32c660000eebe68c22378d2123514136_JaffaCakes118
Size

138KB
MD5

32c660000eebe68c22378d2123514136
SHA1

616e07e30d189068cd2bf68cdc17d77bffe96c65
SHA256

31284f4a1ed648a1f273bd93ece2af469be1daa4542a7f576a3267687ccda513
SHA512

acecb4efe9a0d3ead8ad0d59b8dd099936c722eac302bbedfa6f6214876be404b4d48b6fef66d0e0cc77e7efc9b06c47a016a916d79fc4b52e7a081f7a0e75a3
SSDEEP

3072:PeuUws4dKzOtU6FRwjxdKOXySZFXhrsv43I6OW0fRsbNAO8B9Ni5byeG:ZUws4IzOtUZHKK0N6558Bb6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32c660000eebe68c22378d2123514136_JaffaCakes118

Files

32c660000eebe68c22378d2123514136_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE