b2e43106b49e624843a1bdd63fd38817_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2e43106b49e624843a1bdd63fd38817_JaffaCakes118
Size

296KB
MD5

b2e43106b49e624843a1bdd63fd38817
SHA1

b40b5f5d2f938c73b4cd65a9b5f4c468c6965f64
SHA256

28ecab11738c564d6a249211fd6910e8f3ab1619b553d364ac949a61dd109fe0
SHA512

4e063680afb49dbd3f33b52b2ed6f9537ce87b62e9b4a0c37704eee7b9dcdf8f219b0e79098488e7a7482540d07817753e4e4a011da1f591b0ddbf0235a3327e
SSDEEP

6144:S7Voy1SESgPdlxu79fGwbthxUNdocJSEipVyBg:SmyTSgPdlxe3thx6AyBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2e43106b49e624843a1bdd63fd38817_JaffaCakes118

Files

b2e43106b49e624843a1bdd63fd38817_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 208KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 76KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE