5a20f32c420c7d05f349a21a1d9572fa_JaffaCakes118 | Triage

Sharing

General

Target

5a20f32c420c7d05f349a21a1d9572fa_JaffaCakes118
Size

36KB
MD5

5a20f32c420c7d05f349a21a1d9572fa
SHA1

dc960892171fb43cd1672304f6d2125764bc3437
SHA256

7bf6e326223c2eeb039b713e9dd226505b620105cd18de92b64262ec40353dea
SHA512

a9c22b179b4e10a3ce9b0d8ba0182103d60d6266406c6f79e0fe91bc18366a8ba8c87c06f74e1ead79cb045ad65f22a22f38bda4e5c8658c7c75413e0f41d051
SSDEEP

768:ieCTK/cC1ZQP6vF9U/fvX4zWSTntxUKHmDrm/mlsd:ieCTO5c0eXXYPnwk6sd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a20f32c420c7d05f349a21a1d9572fa_JaffaCakes118

Files

5a20f32c420c7d05f349a21a1d9572fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

729e838be968fa14a71d465fced7267a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

MessageBoxA

advapi32

RegCloseKey

Sections

.text
Size: 29KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ