5d780ee8163a3fd168b9faf78ef36968_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d780ee8163a3fd168b9faf78ef36968_JaffaCakes118
Size

584KB
MD5

5d780ee8163a3fd168b9faf78ef36968
SHA1

25495a48c8c16fa3a63a80c64fd30b15100d6eff
SHA256

0e5687cda202725bdba5901c0874fbd7a1b95269c78af7d788296106a208e654
SHA512

295c675474562ed118643f17fb9b741874370940188235d07b08222be4a05fedee498e2d867ea3c51839f34124e3d97dfaa1db4e065deb30b13b68ddb713d17f
SSDEEP

12288:ny810F2yeGIsrxaoMnlIjUHxwtLHTC2KFT:y8NlGIsrAoSlIjxLzFKF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d780ee8163a3fd168b9faf78ef36968_JaffaCakes118

Files

5d780ee8163a3fd168b9faf78ef36968_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 224KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE