db78488d79d4144da0adc7b1902fbfa9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db78488d79d4144da0adc7b1902fbfa9_JaffaCakes118
Size

440KB
MD5

db78488d79d4144da0adc7b1902fbfa9
SHA1

c29ad1ac9e035b8e839a19d736a843c66fd68fa2
SHA256

43e1d0f64377efe9189b7e57a95878ebc99c7f361b4ea35f2606ecfcb8b2190d
SHA512

c4b4a008e09171e883937ed91a3ff97922f724fa0c77373300b4543f515d0a74bdc65a52dee9d7a7c9c071ff38980f9f10b658099359028863dfaf476a5111be
SSDEEP

12288:ppIwHiJqXaLVvuRw4M8E9WcbX162WcMokmGAkQNwUVv02:puwHi6aZv45p8Wml62FUdAlN5t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db78488d79d4144da0adc7b1902fbfa9_JaffaCakes118

Files

db78488d79d4144da0adc7b1902fbfa9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 364KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE