4bfc8684e189bd09d11fe1ffe00ac9af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bfc8684e189bd09d11fe1ffe00ac9af_JaffaCakes118
Size

212KB
MD5

4bfc8684e189bd09d11fe1ffe00ac9af
SHA1

9760d9b457eba23399bb452237b402607b3b61fd
SHA256

089ba64fd7bfde5f19b564d5ed6a2de63fc9abfc401bb7a0064a43ffb6bfa2ea
SHA512

11f0a9c3c2d69a1aac611246358f2db766d49525988853c44e5d6a512959a82be064356bee26539aad2aa47a8c623874f7bfd604d2606102f325332ffd14207c
SSDEEP

3072:AGOL8EJ+nYc03qm5kZOuAYe33I2SR37ol2w86xqDf0ObPnl6raEyoLg8+ReCwjwx:OYqAYZ3CUuAlnI2Sy6uFOUGoGReCwjwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bfc8684e189bd09d11fe1ffe00ac9af_JaffaCakes118

Files

4bfc8684e189bd09d11fe1ffe00ac9af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18e020beeb1eb9779e27a0067c8121be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE