8e7abaa2fff7c6da2e916979bac05d8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e7abaa2fff7c6da2e916979bac05d8a_JaffaCakes118
Size

284KB
MD5

8e7abaa2fff7c6da2e916979bac05d8a
SHA1

12c6ab946f5f84745b2d7a7305750c3e3edf565b
SHA256

76bc9201c0943037355761b74108ea76f6f823c6faa9279a5e4ed52a73ab6cbe
SHA512

ade02122bc00416ec7469ed5bfc7062deb77a1b5c4de76f781fbe88caf28665b1e9ec8f4ede5b16e22cf12eb5d86ff043fd1c30082958b7c52eb8e5c5f4562f6
SSDEEP

6144:AQX1HDrmnXuUlvBkYQApMX2TPQWPLSYlH9mIXnzft:bAXBRBkF0hzft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e7abaa2fff7c6da2e916979bac05d8a_JaffaCakes118

Files

8e7abaa2fff7c6da2e916979bac05d8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 176KB - Virtual size: 987KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE