6462373fc40a085e99dde2cafac5f1ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6462373fc40a085e99dde2cafac5f1ed_JaffaCakes118
Size

132KB
MD5

6462373fc40a085e99dde2cafac5f1ed
SHA1

3b0e95c609825fce20b6cb7471bda47fb1736dfa
SHA256

d75a97a7867517b0518c28d730ff73930dbbd0918368a848158b46399c2c5211
SHA512

394ac0732bcd013ad5ab18c6374034230753ba7eda68ef56e41490739b90dd4363b9e2fa42e07c007d0bb8e3e4bd6cf0d17e0bc1ea89ede3afab80f0b4a946e8
SSDEEP

1536:xBY590h3rQplVBlqSuuqPYybCnR61Jo8llS9G9n7a343Y5t8jfe+rLuBdHYC:xrGXroQrnk168llZ9GeGYLw4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6462373fc40a085e99dde2cafac5f1ed_JaffaCakes118

Files

6462373fc40a085e99dde2cafac5f1ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE