69df5ecee44432e41cd1721deeb3e0ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69df5ecee44432e41cd1721deeb3e0ac_JaffaCakes118
Size

384KB
MD5

69df5ecee44432e41cd1721deeb3e0ac
SHA1

98c206657a74ccacc20d4e198c43082a8bb9a220
SHA256

af89a7a4192e7a0454560074bc0301fa4e03e543442e914d08854f512e70b708
SHA512

5387702a53e8590c7891270ff8ce2c5a59dea97e057d8e1207de2b7a1832470ca385be0ae1842eb475194c2dbf478f578998b2cec9af6d12728b1ba47bf9e740
SSDEEP

6144:iLEFWSxFHaqZHCyiw2RSOl/hJQvO4BP8rBZBTXJ5ApyWP4yimalhTRRWHGmrMIcP:iAFWSxFnHe7R9l/hJQb58tZBTXjKb/ax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69df5ecee44432e41cd1721deeb3e0ac_JaffaCakes118

Files

69df5ecee44432e41cd1721deeb3e0ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 284KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE