c14733311e1904ea0e5a0e79d93835ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c14733311e1904ea0e5a0e79d93835ad_JaffaCakes118
Size

546KB
MD5

c14733311e1904ea0e5a0e79d93835ad
SHA1

e64b9028d43b2a473fa39cb0fc932b01f0cf469d
SHA256

0d4833e99b6bb8550022d1e9c7af39573b42c915af2d5f5c94d89dbb3c0726dc
SHA512

808427e2bd02c2dcfb0643cf2e7ae7f8dc8df5f5484ae8904242ff119eb3dfbdaadb990e890c733688e4f729680c065b9ecafabae106ec15e37522a2c710bfd1
SSDEEP

12288:PEs1Gw6H0ZAs7h/d3/tKYsyvh47tRZwQxGkDSq:oh07/dF2yvhkZwQKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c14733311e1904ea0e5a0e79d93835ad_JaffaCakes118

Files

c14733311e1904ea0e5a0e79d93835ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE