3cf7a789557a5b30b47aa9130151c616_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cf7a789557a5b30b47aa9130151c616_JaffaCakes118
Size

248KB
MD5

3cf7a789557a5b30b47aa9130151c616
SHA1

fc6b4d7df7e6f72c007dabb1a6d2d5799b5d8a77
SHA256

cea692579aaa8fd4c1d401757c093628be7bb07be4d47d067060767686930b23
SHA512

b702d7050a1f3af26988a3abd1e3d9ffdc94a68c8f6275d29f3c83f7241ad7fb64b5b06022ddcee2f89b88e125826722c5954a55e369bfa68405987b60e8d03f
SSDEEP

1536:yzzezzWWQPWKjbncfeK56F6RDJwhouexsu8vkqy7doLU4fCMZPBHewXfCfOfaKNq:2Pkueluyg9azdKqXrY0ag0McYr2Dc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf7a789557a5b30b47aa9130151c616_JaffaCakes118

Files

3cf7a789557a5b30b47aa9130151c616_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ