8ec8c97ffef1842390c433a0e28c0f1f_JaffaCakes118 | Triage

Sharing

General

Target

8ec8c97ffef1842390c433a0e28c0f1f_JaffaCakes118
Size

328KB
MD5

8ec8c97ffef1842390c433a0e28c0f1f
SHA1

ef6911c23cd477f04812bb2806090026f994f822
SHA256

562055e6039e4bb72e09889caca34444532dece48bb765f1418ab75c5e7b58f2
SHA512

ccfd006e46dfd6a271bb922d31c6b52f7d1682d3bd172d70034b88fc01851400f79b0b5615e30bb39a3f799836f51da15b3d38ba0a2b5e7037c6fecec1dfaa40
SSDEEP

6144:6Ji2wzNOtWbzK7ni+1RQ3yLATGuhjIjjmwlZyKejtgnnNvazBDEc6:mwzNOtWbzmNEGu5sjBnBeQa14

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ec8c97ffef1842390c433a0e28c0f1f_JaffaCakes118

Files

8ec8c97ffef1842390c433a0e28c0f1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 248KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE