b32e3f4f4bcca1d212dbc2664e54af87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b32e3f4f4bcca1d212dbc2664e54af87_JaffaCakes118
Size

212KB
MD5

b32e3f4f4bcca1d212dbc2664e54af87
SHA1

85512b89739d25cf06799e576fffcd222700e513
SHA256

093127ee63788ad5f17579732bf9ed7728086581e19c4fc6e58c383d74d48876
SHA512

b61b6079d7c23596fe89fb9a32bb5cf8bdccacab4a0b8c9fde75d8076d3efeef6cb6bd4c88fde7f983b56f8f26a7f0cfcee5ac232028d3badb73330716f55a71
SSDEEP

3072:sVajOFJqIDNW1UCKlBdwCZMte4YtoM97X2Yel2M5SlZvdFjaHnUwZEWTfOr7qzH2:seKQIDNWihlQAPtt9b2hIiUyzi+Gb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b32e3f4f4bcca1d212dbc2664e54af87_JaffaCakes118

Files

b32e3f4f4bcca1d212dbc2664e54af87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 112KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE