47afa5b8b9ce0197ee934bb95b15661c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47afa5b8b9ce0197ee934bb95b15661c_JaffaCakes118
Size

70KB
MD5

47afa5b8b9ce0197ee934bb95b15661c
SHA1

5c4f6050ca2017b98dd8e6394b32694fe5796db8
SHA256

4562d724be40c3900fcea48d9f4885217e0e10b02369a10772a01622433c5288
SHA512

7dfebdbef180d1236aa59563fd6575e56cadb82f549f9287c290b08ebd02ce7df6304b2b9ef30a93553720f6da7f741e84ec186d7739e88dc355985b68963348
SSDEEP

768:AkPm2UUX1uzirKwIbOab+dGM09Wu3n3/OfBljVuLe4619LI87hEHAoCO2ne8mjvH:5UUFXmDKEefLpuLerI8mjNU47Wj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47afa5b8b9ce0197ee934bb95b15661c_JaffaCakes118

Files

47afa5b8b9ce0197ee934bb95b15661c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ecode
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ