5ad3d96ba4e1809e73ccefe094bf30b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ad3d96ba4e1809e73ccefe094bf30b2_JaffaCakes118
Size

315KB
MD5

5ad3d96ba4e1809e73ccefe094bf30b2
SHA1

c1d6a72e9a76ad664a2cf7415b212eeb5ae9377e
SHA256

e1398db8f890c7ecb2eee9c6f7c6f458c53418059a3f1a3e676fb1182d4e4161
SHA512

270fc5a9d71d86a60dcf1721404f84237eaa9933159ac50cea9ef92acebf02a4df1a8b1122363f38f84f9245fc72f4c19c3d429dc3965240be93d33773d1cfe4
SSDEEP

6144:ILVvWy/YVtUzzUhkfToWQwHG2PIybcT6g2LOJId3yG8zOlecEum3Kv4EQCO9:AYuY3Uf28TJQgxLbK6hc6iG8Kl7EuVvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ad3d96ba4e1809e73ccefe094bf30b2_JaffaCakes118

Files

5ad3d96ba4e1809e73ccefe094bf30b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 152KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE