acd7a4f41735acf1b96ea0e25a278d34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acd7a4f41735acf1b96ea0e25a278d34_JaffaCakes118
Size

1.8MB
MD5

acd7a4f41735acf1b96ea0e25a278d34
SHA1

f4903cbb79b7c4ff695672092b0492f44e4792ed
SHA256

bee7f6baa14494c424ef9e49c6471a0c8d2935f89c7eaa0b4384b61bbc527e0d
SHA512

72ce117b272097531469dc688b7a7b0d88b087531d51e7d5a079f0df5f04e8149c944e5e78464bc65dd0315b81c69db978c51b3811dcd237f47c80434bc36d6d
SSDEEP

49152:o9CK3b0m46i0hPbLce2cfmVCbS+mbln/uzp9:o9C84m461NceD5+Xln/uV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acd7a4f41735acf1b96ea0e25a278d34_JaffaCakes118

Files

acd7a4f41735acf1b96ea0e25a278d34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 1.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 88.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE