47a89a58264022eb1727594c6c1ee06c_JaffaCakes118 | Triage

Sharing

General

Target

47a89a58264022eb1727594c6c1ee06c_JaffaCakes118
Size

689KB
MD5

47a89a58264022eb1727594c6c1ee06c
SHA1

3eeb267fb26b143d83f15eaab0d5ccea63d87cc9
SHA256

18eab5334d46c535651f5d788e4fecd332f565deca28989fdf82e329e905f238
SHA512

6129ec64bdb5b7c3fd555982fefee0bdb6ab7dc21d7cf8d29908047782e108d3e8371bc7c5142f58a23e9bf78689ac5ec083fb4e6e27450f0b9e83d0fcfa0081
SSDEEP

12288:z3rZrvHMa4S6BRggwhFX66MXjptMaPXJg4APb3Gz9aAEp/WovYJkjwH:7trvHMVS6B8hcX7MgO5bU9eEeM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47a89a58264022eb1727594c6c1ee06c_JaffaCakes118

Files

47a89a58264022eb1727594c6c1ee06c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

api
ִ��DOS��2

Sections

.text
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ