675389a398690dfe745c9dae4f303a6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

675389a398690dfe745c9dae4f303a6f_JaffaCakes118
Size

54KB
MD5

675389a398690dfe745c9dae4f303a6f
SHA1

20e538283d89c2a0c456dbe83ae237e769566163
SHA256

a97fe69845256ca5a1e92463b6dc0fc7210d67d548f9a20d022e627ab4fa6f9c
SHA512

e1f30770d1f9b3968041acd60be1c439d032739d7a892a8a6530f64e941bbffa323b185cf64453dc1b0cd4a2a82ec73fec883048caa1064d2d7be5204a369c95
SSDEEP

1536:2fmcmvHklgnCvJeKa5/xVr4ZYNcknDnQxz7v8:Hcm8lpvXa/cZyckDnQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
675389a398690dfe745c9dae4f303a6f_JaffaCakes118

Files

675389a398690dfe745c9dae4f303a6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82d8e844213157c66fcc45569db91a71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
ExitProcess
LocalAlloc
OpenFileMappingA
lstrcmpiA
CloseHandle
GetSystemTimeAsFileTime

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 36KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ