e8c3167e29a77b331f9f49fa6dde2a9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8c3167e29a77b331f9f49fa6dde2a9a_JaffaCakes118
Size

51KB
MD5

e8c3167e29a77b331f9f49fa6dde2a9a
SHA1

349c50fbd4a854353268cec5c22b43382482323f
SHA256

1a9916d2e8439f50010eff00e8079a2475b8e5ca5b6840246ac590f6671c90c0
SHA512

7af4acc35da6347fa5a850607c91981a4e1f60a561543a51cf20eb0211ab94825d893649871b20692a35eec073dd4bb7f8d3378abbd792fe06826a35dd76e1de
SSDEEP

768:WIUCMhPuqKX3hhf+1CpBj+S4cuyN/5V37zbXY49/YqvhRh1bwn:WIUnh2qKnrW1CpBjlPD7fXY4lr1bo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8c3167e29a77b331f9f49fa6dde2a9a_JaffaCakes118

Files

e8c3167e29a77b331f9f49fa6dde2a9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ