96294816f90501f7ed1bd557d6971a86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96294816f90501f7ed1bd557d6971a86_JaffaCakes118
Size

698KB
MD5

96294816f90501f7ed1bd557d6971a86
SHA1

94116001845b93cc112fb05c3da583de8d7d4612
SHA256

3f1c4786f311056dcbf9874a3fd17daf9d38547093453f35beb11f92a9c2858d
SHA512

fac338264e14965c576efe63df9c6dec7c17cc815e1b7d759e7b2f32b6672e2029cdf0bc42310aca0d527b4ebbca29a648a9b419cedc8fffac5d5cefc56ea4ce
SSDEEP

12288:Rqu6B4xbyhkQWS+1hRF26jPZK9O2bj19Ll7mvxumGphz7z+mKx:RquONhki+BF26jPZKd77mk/hqmKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96294816f90501f7ed1bd557d6971a86_JaffaCakes118

Files

96294816f90501f7ed1bd557d6971a86_JaffaCakes118
.exe windows:5 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 22KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 606KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE