03d59fe522c7421d16fd44cf23c113dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03d59fe522c7421d16fd44cf23c113dd_JaffaCakes118
Size

133KB
MD5

03d59fe522c7421d16fd44cf23c113dd
SHA1

b5a0c7b9c07a784d5585a49eba7992db0b29949e
SHA256

66df341e9a8d382345e992ac68374aa0835974d0851087ab8eef7723ce61ae03
SHA512

5eae4a671b8faa13b5c0693b0d2f95c746d665d4714687aa6ff478c36b91b31e9426c174a199b289f1aa04594e3fe209cd3536ad6928e4cf0f2d7f926244008b
SSDEEP

1536:TAJPnj4ZZTj+d1JrtdzuxIu+HfQ4vQR7Mk9cBAuAoR+3Hm3hfz7tR414ibo3hAz/:MFnj4Z56zCRIB62pvbLV3U3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03d59fe522c7421d16fd44cf23c113dd_JaffaCakes118

Files

03d59fe522c7421d16fd44cf23c113dd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

api

Sections

.text
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ