67ce6fb2ad53314f43e8206ec2a0bc4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67ce6fb2ad53314f43e8206ec2a0bc4a_JaffaCakes118
Size

388KB
MD5

67ce6fb2ad53314f43e8206ec2a0bc4a
SHA1

1a777ee7eb7fa8205c2ad1ec901e8897227954a2
SHA256

916168cf6b4ebe87c91957cf9854b6389535695a9b6b80ce216e7157bf7febdf
SHA512

310c65a2b57e15c96d96f81495c22739c03bfb996099dc565ef5eda420d227cd057327694934e376d32493842569fd88aed1e4012ceb7507fe3a4581b2236d09
SSDEEP

6144:g4gKVj/WR+OxatHYj0i4E1qUbV3yYeJNW6loLRMlDWn0RwvZBzus0VGzXr:bVSRXatHYj0ib1nV3l/6oLgD2qsgwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67ce6fb2ad53314f43e8206ec2a0bc4a_JaffaCakes118

Files

67ce6fb2ad53314f43e8206ec2a0bc4a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 22KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE