a6920eaa97a4a293aeb0bee3d1e63e73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6920eaa97a4a293aeb0bee3d1e63e73_JaffaCakes118
Size

436KB
MD5

a6920eaa97a4a293aeb0bee3d1e63e73
SHA1

d0bc361135a88b9f0fa1e0ec2b0778c26a4cb89e
SHA256

6bdfb9a9a8a287815e084982c4be197d501c23a526fe69a0df51459f18dc064b
SHA512

589c216923294f6c33caecc4a2b1839b71dcb56483af5bacd5668b9e597dddd2fbce919d1890491e3e06ac47041133d56e71ba7474b7d96d06967d59577db901
SSDEEP

12288:9S3ybJJ7VhWN8lZJSVB2B+wdMnuNPVgep56Dd3MjzD4:Nr7Vg+a2BtMuPVF6DijzD4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6920eaa97a4a293aeb0bee3d1e63e73_JaffaCakes118

Files

a6920eaa97a4a293aeb0bee3d1e63e73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.
Size: 24KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 88KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 60KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE