bc2dd2f9a1b0a9dbf0d4a427e6bce5d0_JaffaCakes118 | Triage

Sharing

General

Target

bc2dd2f9a1b0a9dbf0d4a427e6bce5d0_JaffaCakes118
Size

139KB
MD5

bc2dd2f9a1b0a9dbf0d4a427e6bce5d0
SHA1

8ec3e8a4e4ebbd1be93afd99308ec6e14831b597
SHA256

8a325fcaa289beb598ccb641262b40a9bbac8ad216ba1c322acaa31d6f8c0dfc
SHA512

feb1637cf74a1c77748383038b77a1a35410b743b1bfb0de35fd082ef09b43807360034c9233324e8a4c81ff8755c2eb4a4eb02ff2c9b8f0261d1d9c001d19f6
SSDEEP

3072:Bz40LFGWEBMWeWiYVo6kAkxSlNEtqfBH8c0cOLbPKB2:Bz4yFtEBMWviYO6Fk4LBHbSbPKB2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc2dd2f9a1b0a9dbf0d4a427e6bce5d0_JaffaCakes118

Files

bc2dd2f9a1b0a9dbf0d4a427e6bce5d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 67KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE