09b18a5e206f87c8f8276e377d65a41d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09b18a5e206f87c8f8276e377d65a41d_JaffaCakes118
Size

15KB
MD5

09b18a5e206f87c8f8276e377d65a41d
SHA1

7c34060e4e08fd2a461ecedb1187b3d6df0e2d3c
SHA256

e86c054760a7869e33aa2ba528f70f98735ef6827fc0fa4dfbf10b85c6fac1d2
SHA512

42ceaeffa059a48959ea55d58a7c2016b15e86ecab492eff554296ebccaa4f9a66bf9e88f85dbf2fda698ece985f1c7cf8277156151a1c17c48abe3b2d3e678b
SSDEEP

384:I/3heLfbO7O63xBdCBS9ELNCToVe62aL2PC:IJ0fbO7OsxaLLNCToVe+2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09b18a5e206f87c8f8276e377d65a41d_JaffaCakes118

Files

09b18a5e206f87c8f8276e377d65a41d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ