3985f55b510d435a1ac661c51d0529aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3985f55b510d435a1ac661c51d0529aa_JaffaCakes118
Size

328KB
MD5

3985f55b510d435a1ac661c51d0529aa
SHA1

7824ec86ce4398e2e30cec7c1ffe2aa9b76a6b15
SHA256

2616e0e382c5f3f0f372aebd4f3116265acb5b47bf7655c758c9511ab690f4d2
SHA512

98bd90d59619651ea11de70ec99450234147302fead0bc5033aa174db90d553d290551aaf2916078cb5d3fd6cb100d47b9a94c1ecd934c883e1e3538655575d7
SSDEEP

6144:FUZNSrdwf9f1tWapKPsRiwd3nB6p30ZZX6JcwAlH7TWNGd:aZUrde9f13KPsRiM3oF0Z4GHlHmNGd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3985f55b510d435a1ac661c51d0529aa_JaffaCakes118

Files

3985f55b510d435a1ac661c51d0529aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 228KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE