40bf9674dd31603f103c47db35793952_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40bf9674dd31603f103c47db35793952_JaffaCakes118
Size

136KB
MD5

40bf9674dd31603f103c47db35793952
SHA1

79d48c23777149abddf90e2eb6bb100beabbe234
SHA256

b1f2642af88c59e0bd1432bbb235727408ea3f479a399691926db5d63838e4e0
SHA512

80dbe2bb545d9e4e25fffdbd8aa9a8c7cc638d5e6ace83d485b66d32455ee10fbbfd8210850cb4bc37148e9f8855e595ed44bf7a7da81520cc3111b45815e724
SSDEEP

3072:Dk5YnmEcE0uFrPDN5GIpgJTpUsRGLRKsPgSsMc12a0A0Ds:Dk5O0uRPZ1ssRK8gSsMc129O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40bf9674dd31603f103c47db35793952_JaffaCakes118

Files

40bf9674dd31603f103c47db35793952_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 56KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE