9471094c9a21956fc51437ad5c20bb97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9471094c9a21956fc51437ad5c20bb97_JaffaCakes118
Size

288KB
MD5

9471094c9a21956fc51437ad5c20bb97
SHA1

9e49cd62a5542b72e71481fcfd08e9d08ca24a4b
SHA256

08e48ba5d7bd35bd90811741fc4e91e7ed393387fed3bc72ea0fbd52044bd5f1
SHA512

6d090f37a2c8471f3cd0c83471b34ee6c24b15648afa074ac4e3ec7454cf1b51405dd635f702d2945528c643459b0ad7154f937c3efb6c62e7e236e4d21c80ed
SSDEEP

6144:MefzlJuRH1bXFaNU0ayorAeLfX2SuIgwMii4av1RYCJAh:MUxJmXn0arBSXwMZ7H2h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9471094c9a21956fc51437ad5c20bb97_JaffaCakes118

Files

9471094c9a21956fc51437ad5c20bb97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 172KB - Virtual size: 982KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE