afcd26a9e3df31fd40d9b359f27808ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afcd26a9e3df31fd40d9b359f27808ef_JaffaCakes118
Size

124KB
MD5

afcd26a9e3df31fd40d9b359f27808ef
SHA1

676eb962078c36817591fce9bb0b99ffd2ae43b3
SHA256

7e712388a68bb5965ec417663045bce94ee523701ab0a6ad7e84b16ea79f6fe0
SHA512

5b4f760d868b67338b7290683054637382fd4ceadffd858df83feadf8731d25a36138f99aa18066978319ddb86635b6c54a5c74d6cada901899216a95c2556e4
SSDEEP

1536:nUW9TDSru6PyceZlQJ0wYMBp9lcJ292qEd/S7Sh7zmI6iyyinCyZv+U6YZHi0Mj7:dTDSrsceoJ0wHBpkkUptz3V2ndtMj7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afcd26a9e3df31fd40d9b359f27808ef_JaffaCakes118

Files

afcd26a9e3df31fd40d9b359f27808ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 40KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE