faa5e4a38878c12134df4863061d833e_JaffaCakes118 | Triage

Sharing

General

Target

faa5e4a38878c12134df4863061d833e_JaffaCakes118
Size

252KB
MD5

faa5e4a38878c12134df4863061d833e
SHA1

8840512ef7d8f6e5ccbd9df3ea0bf3f967acadbc
SHA256

abbb048da76b123fb67670b014ae796b37f63ee917e6e325ead8306e9161d6e5
SHA512

6d73ed1ca45a1f5eef986c58568b2d9b3bcb7870eeedd1186adbee35c83c004c1d1576ead70b794e688e754bd0c212ae7288091a3164be8e96664907eb859d0b
SSDEEP

3072:esJHYqvVdOSe8Snvs/n/ho0HKhSK962IbgykEJvsg11ubYrTNZO8gNdVO1iDSv:TJYeVdO/vs//TiPUgytR16N8gzWoSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa5e4a38878c12134df4863061d833e_JaffaCakes118

Files

faa5e4a38878c12134df4863061d833e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 168KB - Virtual size: 948KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE