b33f41920779af6cef9e1b8041b33c55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b33f41920779af6cef9e1b8041b33c55_JaffaCakes118
Size

448KB
MD5

b33f41920779af6cef9e1b8041b33c55
SHA1

960c9e2a24199bef7021effc3f179ca0a7f5e808
SHA256

c56d6a53f80d004c44c7a9b5f0c0c77a9be0227b638bd402b0c9771bbe81e512
SHA512

9befa2bc792284807fb9d56a1545cceb74302a54ccc99a53b178eaee9a6a7846e78ff0dfe302baa0d1c4e490a843974b4ffb60c10c09c201e20d4dced35f9764
SSDEEP

12288:pHyPCzVN0QqXY+PbI9b4YW5nWJ+2WVXGVYVGM9vI:pHyPqN0nXPPbICacXGZM9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b33f41920779af6cef9e1b8041b33c55_JaffaCakes118

Files

b33f41920779af6cef9e1b8041b33c55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 192KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE