cfb29fd36806b3d1c0fd09a363d02d95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfb29fd36806b3d1c0fd09a363d02d95_JaffaCakes118
Size

488KB
MD5

cfb29fd36806b3d1c0fd09a363d02d95
SHA1

92a7169779847f5049f5d5df6400df0cf6f23129
SHA256

7042819534114c30f884bb6f83ed9138d894e682bb9e2a1304bdeaf9e49b9d4e
SHA512

4e427e81a54dee007c471879ae19b28084f83f3bbbd1bf067b95b6cf6630582e102c8d8951db22a9610cf010f25d6fde9687d3c7a169870ba72b60df347a7266
SSDEEP

6144:OGdk0mJ1KE4ciWmVGTrxN3m949JREiXK+zxeloG2EohuVMXW3Zqf4iIe9ti790jw:O0eF4ZWmQN2ufEin8/3ohJXW3ZA/jVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfb29fd36806b3d1c0fd09a363d02d95_JaffaCakes118

Files

cfb29fd36806b3d1c0fd09a363d02d95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 332KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE