1987cfdf0cfa8ab151bba64cd215f660_JaffaCakes118 | Triage

Sharing

General

Target

1987cfdf0cfa8ab151bba64cd215f660_JaffaCakes118
Size

52KB
MD5

1987cfdf0cfa8ab151bba64cd215f660
SHA1

f288a7d70f19daf88d6564c422ee57eaeddce35c
SHA256

d30d84fb3c7113f9e8a9a1c22822138022bba9d0ffe7fea95ade2459808e2a1c
SHA512

d301f82e7257fd8340cfe1b1316a1e308148ac39d722e9dca6e7279f4391aae51cd4194f6f586bb052bb36d46b06d93299eac1b68f2f4c043ed0513a78a18bdd
SSDEEP

1536:Vzr4Mzh5N4iOvgOWqZi+LNwyKJ7WsKjR+i5dl:VzrJ5uiMgO7tMtiwi7l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1987cfdf0cfa8ab151bba64cd215f660_JaffaCakes118

Files

1987cfdf0cfa8ab151bba64cd215f660_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ