42e729f5fbf9066dcc9ddf597d5ac23a_JaffaCakes118 | Triage

Sharing

General

Target

42e729f5fbf9066dcc9ddf597d5ac23a_JaffaCakes118
Size

284KB
MD5

42e729f5fbf9066dcc9ddf597d5ac23a
SHA1

79f4873e9833975869f1e29c61a7180dac240b54
SHA256

dfd1998aa4f03ea8f2c20ec3b37b12e250043d7384a5c8a446b3872899bf3802
SHA512

97da6481b34e6e6e9acff8fec243181eae78d12a911ac6f04427a15abbd1cb9985f11d3bab9e5d03730a0f11437c7080750bb93a42c9c79f90efc0c1544dc476
SSDEEP

6144:MgoQs0ZICiLGs6f84r47DnWjZxpKAkiiY+qdpsC0gXR8hL7jkC6V0:WDCQD6N4nWjrpLihCpsC0gXRIT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42e729f5fbf9066dcc9ddf597d5ac23a_JaffaCakes118

Files

42e729f5fbf9066dcc9ddf597d5ac23a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 176KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE