2ddeaee819ed5c8ecce4a103cd39ceaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ddeaee819ed5c8ecce4a103cd39ceaa_JaffaCakes118
Size

230KB
MD5

2ddeaee819ed5c8ecce4a103cd39ceaa
SHA1

7e532c9e9ad5d3dd024eb3bb6b10e982c61f23f3
SHA256

905cc23b4f108ec5be9572530738025a922aab1a04b79d0b4013f63852e05b65
SHA512

022784f4a80e49821e3c373d6533217d642fd68527d619be47fda339638bffc3135061926c58e16f65db652f3d5d9e139345463e48c81a62d8c6ec2bb4e49398
SSDEEP

6144:mnTS5Cq+klB7jwj859JGS1VVHHg+Pc46I8IYN8IO:mnTSfT/w6GS1jHAOcjwD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ddeaee819ed5c8ecce4a103cd39ceaa_JaffaCakes118

Files

2ddeaee819ed5c8ecce4a103cd39ceaa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 576KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ