066e1ba7981d55b34c1fe118dfcedd25_JaffaCakes118 | Triage

Sharing

General

Target

066e1ba7981d55b34c1fe118dfcedd25_JaffaCakes118
Size

83KB
MD5

066e1ba7981d55b34c1fe118dfcedd25
SHA1

13c7673ba869be8146004794b991ffa870d94d84
SHA256

db3bc6fbf27c7ecfbb5d1adede8a90ac8eacaa6a6d59745c0b7ebcf53ab66f9a
SHA512

05e9f39f9d0401203299a16de61a46f7f4e3b6f739b3142691525e19a7f6618499f77c4ed524ee836c19232f3e4cd3d2e2873322319fcc6b9fc6cf502b2a0744
SSDEEP

1536:4nccgqVPgqVIf4o0rpZkrju+09bAoFHc3dxud9kJkgQvG8itQ+YjVcKeUscTnd:EkVf4fpOfN8bAusdDJkFvMtQ+YFvZDd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066e1ba7981d55b34c1fe118dfcedd25_JaffaCakes118

Files

066e1ba7981d55b34c1fe118dfcedd25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ