483f5b8f839dd181bdf9e43b0800ff1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

483f5b8f839dd181bdf9e43b0800ff1f_JaffaCakes118
Size

247KB
MD5

483f5b8f839dd181bdf9e43b0800ff1f
SHA1

972f6fdf189b347fb8908384961df87f3cd874dd
SHA256

2dc185521609b637f6620ddb9f483a6eab241286f33ae881d3639628e86a20a9
SHA512

189fc8fd81dce31bf617fffb75d92e489e8f945839142bb8b0c748a0538a5eb128b9845a1910bbde8e6612daa19b02807de23cb9cba50cbc12df4717f1a87942
SSDEEP

3072:aI6Gw5f2PQlCu8UTowlQwm061B0nn3HMxJwJaz2x/yEXckZG:aL5OPQgbUEHr43MxJia2hyO9w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483f5b8f839dd181bdf9e43b0800ff1f_JaffaCakes118

Files

483f5b8f839dd181bdf9e43b0800ff1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE