44845fa6807671e8a2e48afcd217f16d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44845fa6807671e8a2e48afcd217f16d_JaffaCakes118
Size

204KB
MD5

44845fa6807671e8a2e48afcd217f16d
SHA1

1ee476fa70fe9e3af477d736639c7c4bca1c088a
SHA256

9930587c73a5d99f9fbbb32d730377e9aa23e6ef71399a3a49b7d171d4a33bf5
SHA512

11b7c1e77a665cb3f6347d1fbcc43aedc6d12cd9a37869587be6da31c58e65e03c32f1d72b34ff236744d8a40baf149b4980abe8cf938723ed5b01d752c1a077
SSDEEP

6144:EhBe7rhPZuKA32cvKWFWoh5VRa1mI85NBB:EhBadPZuKCKE5Vg1mI8vBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44845fa6807671e8a2e48afcd217f16d_JaffaCakes118

Files

44845fa6807671e8a2e48afcd217f16d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 64KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 60KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE