5aa64dc7327278169e850639a86beee8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aa64dc7327278169e850639a86beee8_JaffaCakes118
Size

97KB
MD5

5aa64dc7327278169e850639a86beee8
SHA1

b1872a7b42d63fff0b705e20d0fe4aa80d4e0ff2
SHA256

0628db2f0a52fbdea8b02bdb1bf51d142a6ebde74ef2d1b061895b57c0f16598
SHA512

5ae4c853066b435e6ba61221ae5a4e94dc3414e8155795b8b574bacb695d60fa853ce02dffd01e6da4b30d1a49579e1be1b7bd1f405241b8a56dc9f86d8b9079
SSDEEP

3072:MjduJ9ts/SvCw60QkHROqxbiDYUZBz7tDoRbjfw:MkJHRJic6z7tUX4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa64dc7327278169e850639a86beee8_JaffaCakes118

Files

5aa64dc7327278169e850639a86beee8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE