4a5336ca00b9aa95a13f5b6b06661c75_JaffaCakes118 | Triage

Sharing

General

Target

4a5336ca00b9aa95a13f5b6b06661c75_JaffaCakes118
Size

380KB
MD5

4a5336ca00b9aa95a13f5b6b06661c75
SHA1

683784216479789389fcf2324a44df574a85b968
SHA256

6e84307af74c662a9e87611f456e8d968466d8b5c0218338051a0162dfc82802
SHA512

d2e9af31549e7ac9021bb7022d3661d598528fd8260a3c1290bdf7cd507b2bb863b9a12282454aac5ec02a1e0dd8096d96d75d86c8752d95ebed6e4dd5b539c0
SSDEEP

6144:oGtHm6ajzeykyTkvyT1DwpGrt4B0BxQAyDCH6Xj/qgkuKdoP/U:ocojzeykFv41ukxjQDDCXVmPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a5336ca00b9aa95a13f5b6b06661c75_JaffaCakes118

Files

4a5336ca00b9aa95a13f5b6b06661c75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 240KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE