3f17388d59d0f6b5d72d9cab3f914c75_JaffaCakes118 | Triage

Sharing

General

Target

3f17388d59d0f6b5d72d9cab3f914c75_JaffaCakes118
Size

260KB
MD5

3f17388d59d0f6b5d72d9cab3f914c75
SHA1

bd43c6217b48ded69b3a9b2b969f9cfd900b5dc1
SHA256

e6daca034aab46c2b9815a1e44b3a4f59077c23ed3be09abc25df76d19c14781
SHA512

a19441b6bf43972683054e35d74d9984016ea40d52f513bd90ee5a187c69d5a8b290c2dc141b55a79b8ba2fb29a27348c3c22ae6bdb57bb312c4e6b5ddb2c526
SSDEEP

6144:elLB1vBAsqSGsNmILvqh/ytPASYlH9mIXnn:epv+shGvhKtchn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f17388d59d0f6b5d72d9cab3f914c75_JaffaCakes118

Files

3f17388d59d0f6b5d72d9cab3f914c75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 176KB - Virtual size: 987KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE