69127d0b0de82145473316f3100bb9ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69127d0b0de82145473316f3100bb9ec_JaffaCakes118
Size

182KB
MD5

69127d0b0de82145473316f3100bb9ec
SHA1

3c68b1b0924327c43c3a07c1c7268b233cc760cc
SHA256

a261f892dbbeaa98df505a33fae1368fd7c6b5de4c7adb1919a4bb3f462febf7
SHA512

da2e0cad5af58b22bf27b1f145aed99d2cad9acd5fc1021147555134c84e71e20655c4bcd78a6e9e89b478c6cd6a111d2df8920404014495c5e0a1834afee21f
SSDEEP

3072:73/Oz83JAQAkefp/9I9zzTTm3flYfLiYq336McYSrJ7l8sxK0sfhrow:7vw8Z1JeN9izPkQLiYoqL+mEhr3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69127d0b0de82145473316f3100bb9ec_JaffaCakes118

Files

69127d0b0de82145473316f3100bb9ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 84KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE