JaffaCakes118_6c6f1fe117fecee4120c3741e2b25036 | Triage

Sharing

General

Target

JaffaCakes118_6c6f1fe117fecee4120c3741e2b25036
Size

376KB
MD5

6c6f1fe117fecee4120c3741e2b25036
SHA1

f9d40c44849cb78452325e1c4761c5aecd8585c2
SHA256

76e5ccee593ad1f896fec8d1a1e3b140f4e4b7a76cff48672c77c68d2871f647
SHA512

0bdf66c728f08af79f0252bfa96c8b53cc3fe67c20bb6bddacd016174baf34517314588d6d81d30ce1fddee1c4253aaa9a5bcce2d0f5258de81f702367dfa882
SSDEEP

6144:IIKUsu60mPZUovESEt20cgeFbNgca5Hzs9UaqVvKMpurcA1LiC1kStXW:3vmPZdEteRFJDWgEVvu914SI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6c6f1fe117fecee4120c3741e2b25036

Files

JaffaCakes118_6c6f1fe117fecee4120c3741e2b25036
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE