6a3060490fee2c04af0ddb7971062bfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a3060490fee2c04af0ddb7971062bfe_JaffaCakes118
Size

230KB
MD5

6a3060490fee2c04af0ddb7971062bfe
SHA1

0c149f5623553e564c2d39736491e9f7b75b067f
SHA256

423648556caac4bf2c1f8e743b997c152481519c79c67b988344eb07897936d0
SHA512

3ff3627b0d0756dbc97d1aaeaad9aa53ab4e8ace3594d9917201abeb6fece82096df288e3869b534b79aeb0ecdd12ca56495dbca0030b1a71a27784833f27314
SSDEEP

3072:ENd8pQmfoF68y1nE0lQkGXQioY4BzVRMDHFtBp4VCMq6FuSow6/1Zf/y1h7Ea7Sx:EUrZnE3F/nyzVRXVzq6F3/W3fthx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a3060490fee2c04af0ddb7971062bfe_JaffaCakes118

Files

6a3060490fee2c04af0ddb7971062bfe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 580KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ