67446f37f1a466157e7979c3c40dd289_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67446f37f1a466157e7979c3c40dd289_JaffaCakes118
Size

188KB
MD5

67446f37f1a466157e7979c3c40dd289
SHA1

87262eacd3037117ea7583d681a9ecf2cf906c6e
SHA256

ae8733654aa2e8d99c28ae92d73ba0c219bc08bd567de435cd7a602377eab192
SHA512

208536e865ff993137741e6d937e4651ad5347f5dcce6216ad360199c1c5230718bcbcc891435ccc7775f005622ae88f927a234968785bb93ab39b7c411147cb
SSDEEP

3072:jqNtifsWPHHXYS/0r/SXXITGL7ib441xlsLrC7xSmdVYKNaFyGYhY:j0I1HXP/vsGL7C1xlsLmrN5Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67446f37f1a466157e7979c3c40dd289_JaffaCakes118

Files

67446f37f1a466157e7979c3c40dd289_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 108KB - Virtual size: 621KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE