e09db5e4754963e2f9946ad54581221b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e09db5e4754963e2f9946ad54581221b_JaffaCakes118
Size

272KB
MD5

e09db5e4754963e2f9946ad54581221b
SHA1

78b0e7b93369f76265148c1affd7867618ff3586
SHA256

efdc6f5cb4f867e97f4b2fe437afef8a602455ea756ca67bdea5a3fb9734dd44
SHA512

adb01200d793bf256c50f377e4ea3b47b4cc30408a7f75b10f165cecd361f9d684f03efb82cd0382bb3e496b39e2dda93c9ea6ed5ee9d3042b0c220e76bb5dc9
SSDEEP

6144:ypQig71yLgDEMkVur5J2Vh2+PbBv9XJTMnitf:sQig71y9VuN29vVJTMitf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e09db5e4754963e2f9946ad54581221b_JaffaCakes118

Files

e09db5e4754963e2f9946ad54581221b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 168KB - Virtual size: 852KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE