ba8036227cd4d2d60e00201d491b4c0c_JaffaCakes118 | Triage

Sharing

General

Target

ba8036227cd4d2d60e00201d491b4c0c_JaffaCakes118
Size

408KB
MD5

ba8036227cd4d2d60e00201d491b4c0c
SHA1

cd65769fad2a27b345b106ced72b5eeb4161c7ee
SHA256

06cb325ec5088ae07cd2774bf992473d7b8f15ab158f82db09b998dd15cd6869
SHA512

77085855ea53324fa4c5335cea1fd22531af4c8c70c194ea501bc41fe0c2386e17b1d7e0da6c5352ae57b3d8782365cb33b40c2bf253a9fe271eb8819c653778
SSDEEP

6144:wuJywwvWQqOHFK0Pt6ZeSyRmop954HbQV+Niku8B+CkneaiTUlt3:Vyw/LOHp6v4nIEVHkB+Cke6t3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba8036227cd4d2d60e00201d491b4c0c_JaffaCakes118

Files

ba8036227cd4d2d60e00201d491b4c0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 280KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE