2bfc37b7a0ff55f1ef023c67e78aa7d8_JaffaCakes118 | Triage

Sharing

General

Target

2bfc37b7a0ff55f1ef023c67e78aa7d8_JaffaCakes118
Size

52KB
MD5

2bfc37b7a0ff55f1ef023c67e78aa7d8
SHA1

99b8cf5d251c0449f43ddd08d5781b2dd9345119
SHA256

d65ec9f96bd1bf0bf113a7d05b8fbfd20d5740cb32f3fe64ef3190271bf9b20d
SHA512

431ad1ba7f62b8731e6b7b4ea53fb0851c2afb423028844a2daf90fc606ff68989345877b661b9937d1b63895c8b45f307a83887d86d2085060e7ce184c3f20d
SSDEEP

768:EDzyFlJ0EQZTn73DrBNHTUh5q36MEapsq9hlScdRccQTZJwJ0JD3ni/6gU/36ZOD:1Pw333+JI0JDY6gi6ZXPjLS5Nk0h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bfc37b7a0ff55f1ef023c67e78aa7d8_JaffaCakes118

Files

2bfc37b7a0ff55f1ef023c67e78aa7d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ