b221022b4a9db57db20091d13dffc2eb_JaffaCakes118 | Triage

Sharing

General

Target

b221022b4a9db57db20091d13dffc2eb_JaffaCakes118
Size

252KB
MD5

b221022b4a9db57db20091d13dffc2eb
SHA1

08a2832974055764a508f434ed30d45298445bee
SHA256

bc300056c116a6076fce0809d889605140320aa226254dcd5247e001adc2699b
SHA512

ce4273ef0258a2c1f25e678352a9a6560560f657bc47f9825a6872aa7dc6b35836d539281e6e3094555747c45d2a795b1e50d6b650d0c5f1e4c5647d99dfa538
SSDEEP

6144:AZMTYGyq0JcSZAE206At1iXq1ZA4SMaBnPxfyo4cBDK/:Aefynn6xV4STBnPxfyoJy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b221022b4a9db57db20091d13dffc2eb_JaffaCakes118

Files

b221022b4a9db57db20091d13dffc2eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 28KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE