7872196afb9309d90aed10519a70fd07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7872196afb9309d90aed10519a70fd07_JaffaCakes118
Size

148KB
MD5

7872196afb9309d90aed10519a70fd07
SHA1

ffdbf757d54811a3b5f252a6572506aa48c7def6
SHA256

363c000359e78b9eda28dc6f2eb5026447a78da4f76adfae9bc73bdaee99f50d
SHA512

b47fa20d0b3ac4f9c5de9d9e8c3cdbfb03ed21dea70ad930ffeecd17e368e489f0c3463a300b35129083e7596c922c609a68e3313c0c0931b304efc7a263834d
SSDEEP

3072:4zPoMoWHO47i6xcXrMIFcQoSu+sDPV/WpDuBELXMC:WPocur6xqozQV1sGD5rMC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7872196afb9309d90aed10519a70fd07_JaffaCakes118

Files

7872196afb9309d90aed10519a70fd07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 48KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE