491a3b3296f95e492e1c7bea4ccc365e_JaffaCakes118 | Triage

Sharing

General

Target

491a3b3296f95e492e1c7bea4ccc365e_JaffaCakes118
Size

228KB
MD5

491a3b3296f95e492e1c7bea4ccc365e
SHA1

7f7783eb2578c63d7f40a61cbe7cbeb968cd6c3a
SHA256

12f6621af3892861070d07710eb097b30afb2299f82b7489d6f9e0b764cd1909
SHA512

4672d55b74544e714f6dc83b9e2607caf74a8d4f64efc779e865657fdac2f5d8898fc58dd875586baf70f7b8b3f82e0d89680a70da6f8746559499a38eb63840
SSDEEP

6144:4i7xr4iYl2989s9xnP+wIJQIPNJjOB9QugLJ8ve9u6:4WxrPcs9xnWwICIP+QugLJqec6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
491a3b3296f95e492e1c7bea4ccc365e_JaffaCakes118

Files

491a3b3296f95e492e1c7bea4ccc365e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 144KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE