a5e4ce00c6d844b7261bc88b2a57db77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5e4ce00c6d844b7261bc88b2a57db77_JaffaCakes118
Size

1.8MB
MD5

a5e4ce00c6d844b7261bc88b2a57db77
SHA1

dcdc71c96590a918f5ebc6a042e7927ffea446d0
SHA256

6abe6d2b38fffb0107d01894987b9c0b9ad1ec1a4df87ee6c1f32a47f42c8425
SHA512

f14c8aea75a80143d823013bf61e3fdc0db98b85cd4be667e7a862737827fc247fdb70e274fe08aa0ba2137605b3c41c2c70a087ea791e1406f2e19061d50149
SSDEEP

49152:Q1JFJnGRBYIMtMX82Dbx4lnnYtvKORJnXY8xKhS+DQNxo9:GFBCBlo8qDORJnjEDQk9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5e4ce00c6d844b7261bc88b2a57db77_JaffaCakes118

Files

a5e4ce00c6d844b7261bc88b2a57db77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 1.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 88.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE