668fb4b50a2ee94af421031760116761_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

668fb4b50a2ee94af421031760116761_JaffaCakes118
Size

40KB
MD5

668fb4b50a2ee94af421031760116761
SHA1

321d1389d3e749b6770b7bb34e715e00fc9909bd
SHA256

c9715bf5b5f964c6435c627e1fb691b23c0b097832d8d1fa6ec9a3bb6d8b6602
SHA512

866cc1c264cd97cea33cb0fb3fea0b94a6d48d164c7e80153f4f580b7a2638e13a7da6d0c5ea5c5cd08442f1c7ac2c80e05d3c0cdb754662cbd486f96b76c7d3
SSDEEP

768:zxDuO8o2t70BVi09TufpVL2PgBuX+edDdyzb+ZzoMU9kbibH3O:ld8o2hdIsuXj2ehU9EiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
668fb4b50a2ee94af421031760116761_JaffaCakes118

Files

668fb4b50a2ee94af421031760116761_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ