738b07966c2318d0a52406ffe37b33b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

738b07966c2318d0a52406ffe37b33b1_JaffaCakes118
Size

66KB
MD5

738b07966c2318d0a52406ffe37b33b1
SHA1

76accc312fb1a0c5997f4a8acc1491fb0af601c1
SHA256

1c351844d12b120404c9b735adcdff34526b0f79bd2e90a04f39cb4e1f4fd4c2
SHA512

60cb59f62002820077cad91fb2cf5ca0edca3f44d7eefeba8191729ae7604f6a879b3879be0141611e143090850d1f325a996703dc8ae9d99fa5ceca56fc5c7c
SSDEEP

1536:VNYlTuh2XfT4HTtM6rHxvxAI5U26yHOOpuy4fSaY9jH9g1pgzTUw:nEyQXbYTNrR5cNyHO0uMC1aR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
738b07966c2318d0a52406ffe37b33b1_JaffaCakes118

Files

738b07966c2318d0a52406ffe37b33b1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 84KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ