8112feec6bf46bf56aac2963f21c143d_JaffaCakes118 | Triage

Sharing

General

Target

8112feec6bf46bf56aac2963f21c143d_JaffaCakes118
Size

108KB
MD5

8112feec6bf46bf56aac2963f21c143d
SHA1

cf49c41df3fd0acd10eee5b9aa10c04e69e201b3
SHA256

f4df03b95c41fe2fb5d2befbb2292955b054ad864d97a3e75adfe90382d26467
SHA512

70bb8c6862c401ae44f88b54f2bf18590712f72d6c71c8ad9c0ff2374c44937e6ceb0ab140b24f7417e349430dfec05d5504a27af34e08a14f19e0009838c55b
SSDEEP

1536:hE6hDaywldhD7rA6Xmf6VCAop7NX+o3STOARs4h7RmKFzG3f8Yk/5gKN:zsywldhU7yVmp7NX+o3PUEu0kYkhF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8112feec6bf46bf56aac2963f21c143d_JaffaCakes118

Files

8112feec6bf46bf56aac2963f21c143d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 20KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE