df45391710004625c04635c19f947398_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df45391710004625c04635c19f947398_JaffaCakes118
Size

504KB
MD5

df45391710004625c04635c19f947398
SHA1

dc281d1093d6bab590d52b219a448466d41b0725
SHA256

4690b956eb21bc9811d73979d1a6ef3be22a42dde9b6fb96861c7995979bb0ab
SHA512

bce6686290a9fe6eb302cc8f77e8b4ff2ce0747878bb2457ee77d08f0e8e0cab0e485e1010d57fd6a4d3fdcd367845cac67a7ec04d43711f4d7e466c4ebc7c78
SSDEEP

6144:SaJX3JeqDGQGR+7K4QgD6Rt8eb6FPo16nIgK54IQzeeeL4/ap1v/ILHXGS:SmJFT7K4Qi6Rt8pA16IgKKM4vXj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df45391710004625c04635c19f947398_JaffaCakes118

Files

df45391710004625c04635c19f947398_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 144KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE