d4c9ee03e7b2fd307458bd86c7ef3815_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4c9ee03e7b2fd307458bd86c7ef3815_JaffaCakes118
Size

344KB
MD5

d4c9ee03e7b2fd307458bd86c7ef3815
SHA1

dcabf4e542ec7cc741d3582cd85b1edd95b23383
SHA256

2d2fb7196374fc33568137429e3949ae01289a418dd5a60fa1f68dc5ffb2cb5f
SHA512

750ffd4e28255acd731a471a0f6c5f1cebc82363cae535ad8c7de3a4a08020dc256319961e9ed343dc41389461e52a74bf9e1fbc0cc8c8e14a263cf364ee778f
SSDEEP

6144:KdxnqjryblfWixCX8l5Yu8WbMbdXNGzERVRLY5WRPwNbVOMp55Gyd:Kzqjr0fWyCslCFWwhXNGzERVq5WZMbVn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4c9ee03e7b2fd307458bd86c7ef3815_JaffaCakes118

Files

d4c9ee03e7b2fd307458bd86c7ef3815_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 264KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE