602f7f9cf7b9677c8da8fa28327a334f_JaffaCakes118 | Triage

Sharing

General

Target

602f7f9cf7b9677c8da8fa28327a334f_JaffaCakes118
Size

469KB
MD5

602f7f9cf7b9677c8da8fa28327a334f
SHA1

7d18c71a11d59add540f39a245a9d344a8e582f8
SHA256

743f6eaec1e8169f04e87d47644e9597bcd44a644d56e27924c17757ba50e991
SHA512

422570cd8304d9689af724e0ba598d1f16036f8a4e4cfe2066cc274b27d760c8af6b0d046b9a293256a1099a480bd40cc3bd7ae560c9de2470e4162e3ccfd543
SSDEEP

6144:Crdv0Fgmxnp0yN90QEo1gWUVCIfQssUQ2lI9JY0oiANtjj1VmtJOyuUz79pos7:CDm8y90mJEfQuhlI9JZx8xsfB9poa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
602f7f9cf7b9677c8da8fa28327a334f_JaffaCakes118

Files

602f7f9cf7b9677c8da8fa28327a334f_JaffaCakes118
.exe windows:6 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 25KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE