69b0964efb08aa7fad2832f2ee2c0483_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69b0964efb08aa7fad2832f2ee2c0483_JaffaCakes118
Size

208KB
MD5

69b0964efb08aa7fad2832f2ee2c0483
SHA1

42c3a5e44c72a0a5c00d21ece1df0d64e6689810
SHA256

f8af4c71fc02106ae30b20c96ba2f814c2369bdf3e733a4bbd78a879a0250335
SHA512

81d1e297bb1840b6b99f6c2e757ef2208af21a7a4a1762864b4f95dfbe3868e4a329f899ab86e3416e5fdf64fecb3e09fd5a5c1e27cd0b69adb82f91e53c95af
SSDEEP

3072:V8ag6VZWnOX6U3O4XcIZ1DvSR/h2CelurV0lWGTqSKWuS6oiMHtcNFNr6cx8aDuf:N79wOzI/hHel0qqSgco7r61j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69b0964efb08aa7fad2832f2ee2c0483_JaffaCakes118

Files

69b0964efb08aa7fad2832f2ee2c0483_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 128KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE