6ae14036bd6421c8f584e8f9d0eb7a22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ae14036bd6421c8f584e8f9d0eb7a22_JaffaCakes118
Size

16KB
MD5

6ae14036bd6421c8f584e8f9d0eb7a22
SHA1

435df9cb5656ffa08c4b44020f6f7ea03e281e7a
SHA256

385bcf7c347f92d2d0b01d42d2ed99d0febef910b9e110ae25c067ca8afb46dc
SHA512

e1b9158dd996bc3e461c67612e357a53b0b20c6dc26ebf41f70456b7a866d1a5a412e4cd5b243961c8ea12653470517715fc983fd18bf19dc30de69ab87a482e
SSDEEP

192:f3Os30tUhfkDC/yRElouthJBB3ILyxGhgXJ1rJzUScne2qZUagHQSxaZqH:vJ30Ohfx/7outhRYLyxGhCpX22UNxCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ae14036bd6421c8f584e8f9d0eb7a22_JaffaCakes118

Files

6ae14036bd6421c8f584e8f9d0eb7a22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ