398c36125c48602291f72a0c2b918f2e_JaffaCakes118 | Triage

Sharing

General

Target

398c36125c48602291f72a0c2b918f2e_JaffaCakes118
Size

33KB
MD5

398c36125c48602291f72a0c2b918f2e
SHA1

4354a7d8242b7367f69c754fa9f35d9767ea6cbc
SHA256

c7a287ed02ee6fb5f644f344c7ca45a40b4d7449efff82163a888ff7962b45d8
SHA512

541bfe26c696ab22a54dbdabcf9baaa98d329400c489f78c835fb972b18bea58d377554d15cfc5c6efb9516b39cfc766950547fffafcb7254d49ed08e6cf0b25
SSDEEP

768:J8G7EG8gwwQO2c7qbgyZVSXLmIa210qtlYmY:5nDWVSXLm900+Yb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
398c36125c48602291f72a0c2b918f2e_JaffaCakes118

Files

398c36125c48602291f72a0c2b918f2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ