07b7f3d6095dfd5c617164f71638a011_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07b7f3d6095dfd5c617164f71638a011_JaffaCakes118
Size

144KB
MD5

07b7f3d6095dfd5c617164f71638a011
SHA1

fd9bf46d2a1d865b2d1fb445a94fb36655b6f1a7
SHA256

ade69887d83a1276f9c0a523366c41ebcc320e949d638ecfaa9de0ad4f92c570
SHA512

da5d821407fb492a05a697e94bded907c1934ef6c7a8548ff4587a739f5c5d211a8d008e24686758e06d9c3779e4904f33a6f41e5b719d47635bd3b99aea2419
SSDEEP

3072:S8lq0khd9BryC07E8pJErJ3sXuhS9IKJ6rw0I5DS5DD:SmfklNM71MsXuhSSxteDgDD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07b7f3d6095dfd5c617164f71638a011_JaffaCakes118

Files

07b7f3d6095dfd5c617164f71638a011_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 60KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE