c8c9ff2de89afb4c4f1e5ba03193b163_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8c9ff2de89afb4c4f1e5ba03193b163_JaffaCakes118
Size

180KB
MD5

c8c9ff2de89afb4c4f1e5ba03193b163
SHA1

9483e4811407dba415feba46402e06ff3cc7b0df
SHA256

38d3af31c6e1843360c8fc3ccc2ff47ce6459720d9999f75ba1e1e8a9e70f34f
SHA512

bb92eef92884bba59fd7611511e9e5feeeb9178eccb44c536628944645688b682175b79213cfda4186385d3e5b41d727b67234c8ccc951cc3c808e558da383d0
SSDEEP

3072:qhcnuKsWozZHtNmophL9yb/xG24BGOc/9n2RR8U6KU9n0avIFoIExNXQJwQ3J8:aIuKbozdh52Q24keCB97vj9XY3J8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8c9ff2de89afb4c4f1e5ba03193b163_JaffaCakes118

Files

c8c9ff2de89afb4c4f1e5ba03193b163_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 96KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE