6895a222620c1130a6a1951a98b68d40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6895a222620c1130a6a1951a98b68d40_JaffaCakes118
Size

228KB
MD5

6895a222620c1130a6a1951a98b68d40
SHA1

adec7f003fa23a7e44cf28b0bd04331b8ff6191c
SHA256

332dcb7655694fdd14ab983e30db4b71ad49da44c9ba07502df505abae0a828f
SHA512

148b7fb34821821290e4c903122bc0f551acf059d4e4516ec52a73207ddacc24a74163e711cf5d58eed926899a0bca278289d5d76b0e21ca37d007aa00eb4651
SSDEEP

6144:h9WybKcEqjQWEc7jUfQ4HyXE8MxJia2hyO9B:h9WyeXqjBVT4HOUJ12hX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6895a222620c1130a6a1951a98b68d40_JaffaCakes118

Files

6895a222620c1130a6a1951a98b68d40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 132KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE