5fb3b24abc5e073628092cb0ba50595d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fb3b24abc5e073628092cb0ba50595d_JaffaCakes118
Size

328KB
MD5

5fb3b24abc5e073628092cb0ba50595d
SHA1

80c9510f04e0bc47cfbff912ade5a9da96ae3b64
SHA256

5a1ffe5dd4ecaf3bc27b5cab1d82c644119e28212b61c19c1ea62d91a0ddd2a3
SHA512

cdbb310f313cb77669a9ffd8ffa57f9ffe707ee533b458b1ed8e8cc88ea2be0aded3100645b9f129c5c3730773b7ce9ad96e3294310f875262446ef6a81897db
SSDEEP

6144:nDcsBqVN0uwhN1Xoxi6tBWOKfFK+gF4H0R1mJwF7Nxu6LkzC/0azBDEc6:D7qVNlwvtoxiYMd9KfFz14wP86Az+0aG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fb3b24abc5e073628092cb0ba50595d_JaffaCakes118

Files

5fb3b24abc5e073628092cb0ba50595d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 248KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE