73644a30f99339924888bf241da07132_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73644a30f99339924888bf241da07132_JaffaCakes118
Size

148KB
MD5

73644a30f99339924888bf241da07132
SHA1

1db1bbbba10f3733f47f944895d74012d7223e60
SHA256

0fc0f3f697841843223c8dae137ca04a62ff95d82aafbb4ee5f1ea48dec07717
SHA512

ee36d5a36e17444a490af700163785c54661430937e389341204242f1b187589296d874d0ef867d5c9a1374366d39f5636325f4de7251dfb307d658512f96497
SSDEEP

1536:FXRUKPIwqMsxYVlmnUHeqDimQ4Bz3YWTdo:VRUzx2mceqDk4Bo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73644a30f99339924888bf241da07132_JaffaCakes118

Files

73644a30f99339924888bf241da07132_JaffaCakes118
.exe windows:4 windows x86 arch:x86

590b765386bb6579369b0adad521c816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

ExitProcess
GetDriveTypeA
GetModuleFileNameA
GetProcAddress
GetTickCount
LoadLibraryA
Sleep

user32

MessageBoxA
wsprintfA

Sections

.text
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.other
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wreloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.widata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ