ce213b46c0ae32b6d874a0bc38af62a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce213b46c0ae32b6d874a0bc38af62a2_JaffaCakes118
Size

328KB
MD5

ce213b46c0ae32b6d874a0bc38af62a2
SHA1

7fdea8e9cfbe16823b468b6ed448f1e35c8dcaf2
SHA256

2389e1040016f0dc95b178bc1d39839ceb2c42f2fee4e6219a5e98a0dcf0888b
SHA512

3c0959acd202a463e828c05fe41ee236b20d095209bbae89b6ef4b50a3565b85d0fd692f0c353312dbcef15cc27a6d67293a782942d5b0acb6931be0ac81aab3
SSDEEP

6144:KEh+VRjK8gvWnfIALf6ZVAyUAF3ffj1kTXQBaM:me5g4arAF3R+X0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce213b46c0ae32b6d874a0bc38af62a2_JaffaCakes118

Files

ce213b46c0ae32b6d874a0bc38af62a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 200KB - Virtual size: 595KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE