ea3cdb53c231515d89b04a4a6aa15a51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea3cdb53c231515d89b04a4a6aa15a51_JaffaCakes118
Size

520KB
MD5

ea3cdb53c231515d89b04a4a6aa15a51
SHA1

b1c1bc76dfd75cb1954dc04dc12e46507604d511
SHA256

9f590b9b27d6da65f19e05da8d10acabc4977dd1cc9cd76aa3388d9ae288d6db
SHA512

3ad40c54cb4f243fb07715ce2dd9e75e4b62d21bd1b820b4347aca4551c32047c7d052239bf8acd75e07fa86aba78cf68080c2a175b0fad629f084073e159fba
SSDEEP

12288:AukQ2Wv5O/Zzidr9lZkyQGUUzZdiLp5MR58Ygll:sQXv5O8dkyQGtdiLp5MX8X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea3cdb53c231515d89b04a4a6aa15a51_JaffaCakes118

Files

ea3cdb53c231515d89b04a4a6aa15a51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 376KB - Virtual size: 1000KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 60KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE