22b2300e4367cb3b5ea696df47bf7869_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22b2300e4367cb3b5ea696df47bf7869_JaffaCakes118
Size

6KB
MD5

22b2300e4367cb3b5ea696df47bf7869
SHA1

9dd162e14ea17eae3428a4a2428c0e1ed8ff54bc
SHA256

9f03803defc7f786cbd5592edff37598c1e2bf1d0260b8ab11cb2ee85b3df097
SHA512

802686f70eea9bfeb1d5d4e29661ef25c6fa5484b336ab6ea23a27ec00a2f7fce9898cd1aa6dc7b4ff8835f71f13b41ef000ce33662e223f7f666e702ac95e53
SSDEEP

48:KxnnjIPmLRBP2rXkirQ8MP1IuBoBjXfgVJwyrnpSSvv5E/wlIIIqma+AjLUj5U5d:YzbP2rG8KK1Xf0VG/wlLmiEFUkputs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22b2300e4367cb3b5ea696df47bf7869_JaffaCakes118

Files

22b2300e4367cb3b5ea696df47bf7869_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ