864660d788b94577d2ad430fc5e231ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

864660d788b94577d2ad430fc5e231ce_JaffaCakes118
Size

248KB
MD5

864660d788b94577d2ad430fc5e231ce
SHA1

600a4c8823aa82d1966829331c666da75557a213
SHA256

33676c8d43e2c5682fdd09e25de5b8f7a8f6b8f88e24a6c483bfe7eb1f5c816c
SHA512

568d86b781a9131f3006d5349bf7c135a1fc8c8504d01d67daa841be1dd758f147371a10b8c076a6076ef7772d169c5071a38854bab1c7b8b74aaaba96a4205e
SSDEEP

6144:RrlIcSXkbgjyZaohoBcaUU9Bd7bpmNy1p3:Rrl6Xugjy4Nx4gv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
864660d788b94577d2ad430fc5e231ce_JaffaCakes118

Files

864660d788b94577d2ad430fc5e231ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 168KB - Virtual size: 595KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE