66591d6a6b0d820df482be98c8c8a624_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66591d6a6b0d820df482be98c8c8a624_JaffaCakes118
Size

668KB
MD5

66591d6a6b0d820df482be98c8c8a624
SHA1

c759afb78e87dd0ea31e85812e348e16c99abf42
SHA256

23d0998cbbf33015694d00c036ae371b1f8eee5d61a6d960753c956f2be0fe9a
SHA512

d51ef0fe59654fbe3af6a27ed108a571028d7bf1c12a6defb174e569a7b8bb352f3142cd499e165fd38536c75f8e6fc13a3f7cbaed6cccc3c71051255bb073d7
SSDEEP

6144:s7gxGWUzHHJiGQFmKcLfHOwJZPvqlCwxg/EhKupRxSJyaZ:s7gMl7pfQFOOipvrbsoupRxSJP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66591d6a6b0d820df482be98c8c8a624_JaffaCakes118

Files

66591d6a6b0d820df482be98c8c8a624_JaffaCakes118
.exe windows:5 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 22KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE