2e574c3c0548ab0adecd158923b72b12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e574c3c0548ab0adecd158923b72b12_JaffaCakes118
Size

517KB
MD5

2e574c3c0548ab0adecd158923b72b12
SHA1

e2985e538c4afb5d859a975e715e72a85dafaf7b
SHA256

eaf9bb354e62ea49fff19f595e874513e81c255cb26c43d4b95a7c231f085de0
SHA512

8fdafaf44e261ccd50072b10311a8328ab502b4c2abb11b727a45fe422f9aa08c37bbe05d5a702961839304c769f5c94dda879ec4526453e717d9c2a6cdb8a25
SSDEEP

12288:cU3QOTBx2IohHqpdDXTm8rI1PFGPIEXwNz1:cUAs2IoovjT8IgF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e574c3c0548ab0adecd158923b72b12_JaffaCakes118

Files

2e574c3c0548ab0adecd158923b72b12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 436KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LiDo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE