8cf193b74feac6577319fd8920c14ad7_JaffaCakes118 | Triage

Sharing

General

Target

8cf193b74feac6577319fd8920c14ad7_JaffaCakes118
Size

237KB
MD5

8cf193b74feac6577319fd8920c14ad7
SHA1

f1ed7c88530b4aba8db242529b5e5cffcce4170f
SHA256

e0ad3c5d7907990ae51dc40a663aee1e8cc1ff5e46b3cebd37160b884d826420
SHA512

9cb08342c9a018524125784e8085c25759ad6408e1e7e8dc9b9e2a388d8e766c8b2842cfec905869f72a1bac3c09109e59248f151be53f1076ad5308d5177678
SSDEEP

6144:Wh42E7g/76hyUWf9dWMCfhUOPsO6WIOnKrF0VQRN140p:92V8+/PJO6WzesQV40p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cf193b74feac6577319fd8920c14ad7_JaffaCakes118

Files

8cf193b74feac6577319fd8920c14ad7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 136KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE