a3ce249447306ae720d72ce5afbacff2_JaffaCakes118 | Triage

Sharing

General

Target

a3ce249447306ae720d72ce5afbacff2_JaffaCakes118
Size

608KB
MD5

a3ce249447306ae720d72ce5afbacff2
SHA1

fbaabf458762e937ed86ed8655c58927cb46fb09
SHA256

8b71ae902012eb85431fff1b9085a200153c6cf20a7fca7ad48768ee13a12c73
SHA512

2faeab32acf15323c030c67941b6dbd24e9e544e33cc1490782b5607434c763a8799d100cc6748c0b8059833c5ce8b8dfdcf9b54c4159d458e7cf314e43bd3fc
SSDEEP

12288:WRPIMWG6NcSkY94bSv9S1Zr/NKw4PsN7gJGQ7Ht:WRP1WG4zkY9oTr/N0KgFt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3ce249447306ae720d72ce5afbacff2_JaffaCakes118

Files

a3ce249447306ae720d72ce5afbacff2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 516KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE