ff27fc4d3a59186de4924ac1df7c03fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff27fc4d3a59186de4924ac1df7c03fe_JaffaCakes118
Size

228KB
MD5

ff27fc4d3a59186de4924ac1df7c03fe
SHA1

d0272ed04f00a7996d2fc06ada5fe40fc7a39f10
SHA256

f2295dfae44c1b0e45d5f29b4fef5fcd06df913a5ea066091b3c0abe999ee6a8
SHA512

4aadf6e6fb8657f3a89f9d0be06bbdcf7c8027c8ed1ada09609e7f384ae4c94b996459b8783a3629ec78e0497eda634c50e52007c1f76d568e27958da1234348
SSDEEP

3072:7Ee7sAQ0QXPpgmjNqrYyk831ShOs7MragwjxV5HHfF0hu4djLvIwKrv7h6o3ePb2:9NSPLNTyk8FAUOgaf6AIINdD3eIsA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff27fc4d3a59186de4924ac1df7c03fe_JaffaCakes118

Files

ff27fc4d3a59186de4924ac1df7c03fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 120KB - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE