77316367948bdf1fc52c0f234ddc9921_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77316367948bdf1fc52c0f234ddc9921_JaffaCakes118
Size

324KB
MD5

77316367948bdf1fc52c0f234ddc9921
SHA1

4ded63b943ba2c5b17d7a0c3fb016d00db6a1098
SHA256

ebd0734da8a2145afb2cd798bcd511a0d1989e1ba56161b9314dcc774e342560
SHA512

fe976445bd7d3da0ddad922b1a1e711688d33bafbdae675e808f83a2b253a9d08f5b74aa18f108795226779a0a61d41c1886c6e521c4d451c1a3d32af339fc1a
SSDEEP

6144:1M6iHZU0AJSNdd5nj2XLLhs0hzFOxCgbJ+oFFAnhce+L4K6lO:G6SZU0AIdd5j2PhskzFOxQoLnf4K6c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77316367948bdf1fc52c0f234ddc9921_JaffaCakes118

Files

77316367948bdf1fc52c0f234ddc9921_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 220KB - Virtual size: 770KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE