43ee74241b5c7aabb8bbf809da7c10ee_JaffaCakes118 | Triage

Sharing

General

Target

43ee74241b5c7aabb8bbf809da7c10ee_JaffaCakes118
Size

228KB
MD5

43ee74241b5c7aabb8bbf809da7c10ee
SHA1

6e0c12e534aa13b98307982a9887d8315e8a823d
SHA256

e5d22a2444ae3c8617caae8fa1b46881b16261c7a2ed7c467aa430a04956070a
SHA512

a151fd9e2374cbefec3837fdf71defd89c966584d62f544c921edc969c1d01c311e012d72e0fc54532e8c7c75a9c7c36004fdf0854f6394c5bf0084966906082
SSDEEP

6144:4i7xr4iYl2989s9xnP+wIJQIPNJjOB9QugLo8ve9uV:4WxrPcs9xnWwICIP+QugLoqecV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ee74241b5c7aabb8bbf809da7c10ee_JaffaCakes118

Files

43ee74241b5c7aabb8bbf809da7c10ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 144KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE