beda82b35d63da6d3e24ecc9b7a29e08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beda82b35d63da6d3e24ecc9b7a29e08_JaffaCakes118
Size

318KB
MD5

beda82b35d63da6d3e24ecc9b7a29e08
SHA1

fba1975d2d65c9e3fc4384c0881dad3cad745c08
SHA256

06a8ca76a1f5d4b70f09a436fd73685647eaeab2b5fdaa0adf2ec7dad49c15c4
SHA512

e1c9c08f3d50ca361b5b609831dc56f5708c02e1ee97ed4f78d963dc1144c03878bf2c0be47ade419228a9afef72153a8096b94502790028df150bbc0b374ce9
SSDEEP

6144:2gKJjrgu1BpMw9rCLmEThp+Guqa577fmoucRF7yE5QR/jJYFHJHyHw+jH2q:2gYppHCLTvmlpAMi/9YFhydjH2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beda82b35d63da6d3e24ecc9b7a29e08_JaffaCakes118

Files

beda82b35d63da6d3e24ecc9b7a29e08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 4KB - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 75KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE