119ea8d3a41976a1cc0757584b69d14a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

119ea8d3a41976a1cc0757584b69d14a_JaffaCakes118
Size

132KB
MD5

119ea8d3a41976a1cc0757584b69d14a
SHA1

d193ed67b8a6bf2d96fae510463629cc32421790
SHA256

b7cd066afb7271905936e944dfff12e5cb6c14f07b518c00a4cc4bb9e116e62a
SHA512

b4bce94e1f81d7a6d58b9ed79dea8f7f56efac9ecc4ee3764c5c340445cc6729b492c2253bebd372d69e4e79ced68365b87422e4d32952e2c0d68d1df668bd79
SSDEEP

3072:DJls5VQyZVzlzXP3kcnZO/TIxM75QHPUk090C5mi:DJlsPQQVzlzXrCIxA5eMk090CT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
119ea8d3a41976a1cc0757584b69d14a_JaffaCakes118

Files

119ea8d3a41976a1cc0757584b69d14a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 52KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE