ef80bf6c2cacf617c023fc3e7cc64105_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef80bf6c2cacf617c023fc3e7cc64105_JaffaCakes118
Size

161KB
MD5

ef80bf6c2cacf617c023fc3e7cc64105
SHA1

5ec647d3e22696123f4bd8b4f589961e65f776ed
SHA256

bf355912dd454e93952f81f92bcfdf5562e6e28fa97d5b2afe6f0112a325f245
SHA512

dee29e0c8d363695416faa68623222d27dd43d8c8ea8ae0fe0b0697869fef547f91bfa28249f6123bf06f47acb1ec0761136c62d4fafffe532bdbd651cc788af
SSDEEP

3072:GMyrHA75y+bk0cGh715Q8Z29lqLW45gX5gfm:CrA757A0cGBzd29l2W46X6fm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef80bf6c2cacf617c023fc3e7cc64105_JaffaCakes118

Files

ef80bf6c2cacf617c023fc3e7cc64105_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18e020beeb1eb9779e27a0067c8121be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE