2dd4d2b14e527df991723694924badda_JaffaCakes118 | Triage

Sharing

General

Target

2dd4d2b14e527df991723694924badda_JaffaCakes118
Size

56KB
MD5

2dd4d2b14e527df991723694924badda
SHA1

f958836d952c893322b03466d183007ece58a853
SHA256

25ff8962d3088fdb6b40521da5dc8a08010ca3e95977c8200119dd9e3457f5e3
SHA512

87ac739d1bf8429ca25afb3e7ba28d65d9993cb92e2c60100a71021cfd243e4cc01580ebbbc50d107adbccac5ddfb76e74a25bf1c2ad087d1b0e7d0c7f9c3dd6
SSDEEP

1536:CBNsYvTSEzIKnX4Qq4K1k/LIR0MbXsIYNUXw2:CBZTSDKXu4KsL69XSGXw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd4d2b14e527df991723694924badda_JaffaCakes118

Files

2dd4d2b14e527df991723694924badda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ