6564b415bff66338744ef9517cfd09b4_JaffaCakes118 | Triage

Sharing

General

Target

6564b415bff66338744ef9517cfd09b4_JaffaCakes118
Size

276KB
MD5

6564b415bff66338744ef9517cfd09b4
SHA1

6f7c46394554f59472b66bf10a33a3980f1cff10
SHA256

e819a33b00f96112fea753a9289c1973238bdabd80bb5bfa29d047d39447b1eb
SHA512

6d1c9b3cfa75b2a2fc772343723915ff98d6cd4483576d3ef33bef6b647540e97d4bc7d59af9b85cf9946a1a29c62b2cb51f56f651dec7426f76f8ca6aa0ffa6
SSDEEP

6144:jgSHG8wBvVh8I2BLyZgJHR/mLYFxtUrhfr/HyAUDUZwg8uKn6psx:UeChfn218kHIMFPUrRr/dYUfCz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6564b415bff66338744ef9517cfd09b4_JaffaCakes118

Files

6564b415bff66338744ef9517cfd09b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 172KB - Virtual size: 701KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE