2cfb3428ff09a4fc36545a1ce55ab5c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cfb3428ff09a4fc36545a1ce55ab5c9_JaffaCakes118
Size

588KB
MD5

2cfb3428ff09a4fc36545a1ce55ab5c9
SHA1

8eb94d56f41abdae8eb0d398652b84c746f4b55e
SHA256

b9346c8eaaa3fd470c2e03a9aafbdb82c66ca1b06fddb5c62da3242964e81c67
SHA512

a8ddac07b057ef45439aa4dd4690843b2cb37a5af692958d1dd0ddaefdcd745da23a4be4156f783b9f51abc14f8dbae3ff4be66b98b903a2d8ff49df41da06a5
SSDEEP

12288:pk1FOzUMR7nSiQlEMpll2sGru/wPPrz38+H9BoVYjsBK4R:cl87nImYlAE+HDdsBN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cfb3428ff09a4fc36545a1ce55ab5c9_JaffaCakes118

Files

2cfb3428ff09a4fc36545a1ce55ab5c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 500KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 76KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE