1871f8e312443b97f53b9c796258d45c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1871f8e312443b97f53b9c796258d45c_JaffaCakes118
Size

36KB
MD5

1871f8e312443b97f53b9c796258d45c
SHA1

c175f980d6380e36e7edc5b2865c5448a706d43c
SHA256

96556f8e2318bab2a810cd610476a758e4af08bbbbe6a5c06254fc5e6d3c6294
SHA512

b500e6a56bab7821ce609a810212ea9338f5251cd6543ea223e624af5d3f56eb0efefa3098ab933ae8327a36a5b173a6923aa1a702c73d73566ed4eeab77d161
SSDEEP

768:/WhXUJux67akc5yfMlRa3LAPhxYvIEQ9WdzCbNP+mmx1cXG+PqK:WCTcsohivIY6PX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1871f8e312443b97f53b9c796258d45c_JaffaCakes118

Files

1871f8e312443b97f53b9c796258d45c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ