dac36c3bc59fb69ce5d1d96297468a5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dac36c3bc59fb69ce5d1d96297468a5e_JaffaCakes118
Size

326KB
MD5

dac36c3bc59fb69ce5d1d96297468a5e
SHA1

fedb40007031a09e67886f9e5d025b2fa04b24d4
SHA256

be0b06c106715c2d4cc670d5ca0f776bcd9cde68d865628033a17717a3ed4522
SHA512

17c74354c3da13aa7e84703d9891a3ec0dc67c77900397f8fcdf82f01276d3f4d4da68ee8c7362be03642963f85433ca0bd5913b64a684970dd13c17987107ad
SSDEEP

6144:T3FLwTA8qzKVMDdG8cbCZvc5GPVgXHUa72t2CJzwguVyMDV9ni:pUAlVDdXhvc62H72t2mwgyyqji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dac36c3bc59fb69ce5d1d96297468a5e_JaffaCakes118

Files

dac36c3bc59fb69ce5d1d96297468a5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 249KB - Virtual size: 787KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE