965387d6412e7bf443ac639cc13b9257_JaffaCakes118 | Triage

Sharing

General

Target

965387d6412e7bf443ac639cc13b9257_JaffaCakes118
Size

154KB
MD5

965387d6412e7bf443ac639cc13b9257
SHA1

4aef81b05dca1f712e81dd5ef5bf678d08119daf
SHA256

44d24d1bd3040abb842bc652aa63cff05983862498397a430617342c2d4f4a8f
SHA512

c891fbd61a44a6a265f06851ac2f4bc64bbdb4c28239428a0f2b2ba089dbf1aae5485db31d9ee74b4579694c319b6b7ea6b80596f6b27d79e9bc2739ebd7e2f6
SSDEEP

3072:w+qoNSxD3acD3tbCkI8vn0jkeRegmKVvmK9b9xpWQD:nqGmac3trvXeRewvR3P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
965387d6412e7bf443ac639cc13b9257_JaffaCakes118

Files

965387d6412e7bf443ac639cc13b9257_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.scpack
Size: - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NewSec
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE