282a801d236346f9bb813a6478a6ad14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

282a801d236346f9bb813a6478a6ad14_JaffaCakes118
Size

386KB
MD5

282a801d236346f9bb813a6478a6ad14
SHA1

4700b0192bde2427905fa53552c2c67b07a125f5
SHA256

e9cfecc1c7dd750a9710d01603c290f1acb03b1f1236435882441b8d910ae19c
SHA512

5d4200d2bbbe9b3b9877681566dadd5dfc4d5381333b08a765eea4e5090bc55d015c5c77689678949893a6c17947ee0ff2d7045a5f4a821316e95d8b7aed9df8
SSDEEP

6144:teobs+a4MiyUBCjlKUpfn0tyZJ46Qfs/x:oh48UBySR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
282a801d236346f9bb813a6478a6ad14_JaffaCakes118

Files

282a801d236346f9bb813a6478a6ad14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b55f776e57c6a6e791d3ddbe3178ef57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
ExitProcess
VirtualAlloc
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 530B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 383KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ