3c2dfdf5bc2a7d48db869607855cfde5_JaffaCakes118 | Triage

Sharing

General

Target

3c2dfdf5bc2a7d48db869607855cfde5_JaffaCakes118
Size

916KB
MD5

3c2dfdf5bc2a7d48db869607855cfde5
SHA1

b89384d71bf4cc843d61440f215d58aedf2c55ad
SHA256

8b26857cc0e77a877d255f80ce1f88f57d9067f25895a8cc7783deb4e1d6b9b8
SHA512

f1b5ef493d6ef5439d48e7f3aaa654f41c4ec8354017b5169ff3f8bda9674c7d5fd3455c96178c9e9033637c35ed9101522d54ba60ad28a62163fc33e4b9d055
SSDEEP

12288:msBQ7QwMO1w8SB1+TmqLsxZNLosy7FiDVv6xkYgfLk1woCOB6ZevWVBIy3yyLKae:ji5MO1to49Ls/hotYh6ilfLxZQqB3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c2dfdf5bc2a7d48db869607855cfde5_JaffaCakes118

Files

3c2dfdf5bc2a7d48db869607855cfde5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 748KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE