381793d27789f51b0d6b8998cef59973_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

381793d27789f51b0d6b8998cef59973_JaffaCakes118
Size

384KB
MD5

381793d27789f51b0d6b8998cef59973
SHA1

03827557a42690a772828c7a0b9b4037e9a9b622
SHA256

2fb1dc36c14a25a9218e4a5b4f806410d16d04541c3a7abb0f983b56920bbfe7
SHA512

0c035cb0097a17ce8e3acd1e6a64dc2bb5a7f5b6fc92ce3f06ce3baf90ea4cc532f95f2684c9919516885254b2b6abd5146a90ef423b3aed4401358ed64344eb
SSDEEP

6144:xwgEwsj2WEVIMnvHTPXEZkyRo2w+3sE43FfH+rFb7fK3B1eb5f4vqm:xpsjaeMoBRl3sE43FGrFvfszp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
381793d27789f51b0d6b8998cef59973_JaffaCakes118

Files

381793d27789f51b0d6b8998cef59973_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE