65e461d016c09f30aa88fd91860995e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65e461d016c09f30aa88fd91860995e2_JaffaCakes118
Size

228KB
MD5

65e461d016c09f30aa88fd91860995e2
SHA1

a4c9e4381d4cb5f282ac2cb728024f1448733fa9
SHA256

df11248168ec46035adccd5665cba8d5878d36cd440db9551741dc5b451c1885
SHA512

adc19a21cfdc21327df9fa0c8b5a64a37a42729271c384159203b139a8625430a5acd7a5cdc4485916350327e4dea24e932c296e548428a77845262a48406b8f
SSDEEP

6144:rcoatn18eHJzqObW7FXtnR8eUY3Z/oAvlGJkcxE:rQqelLbetRXp/LNGJzu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65e461d016c09f30aa88fd91860995e2_JaffaCakes118

Files

65e461d016c09f30aa88fd91860995e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 144KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE