769eed0ed95e45c470e4bc34eec2bca2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

769eed0ed95e45c470e4bc34eec2bca2_JaffaCakes118
Size

12KB
MD5

769eed0ed95e45c470e4bc34eec2bca2
SHA1

ce68bd62ebac0c5f0513113ca7206455bed8e192
SHA256

2fb21116ab56bde27dd769b9bec1191662a8e10028e6cde3eacef6b5c3b90f00
SHA512

dcd989fa906f6db449ff3484d908656b4b6ef996fc3ad5ba7cf01ae6adbe0801cdc8cf0856ab59a47f5c42cfece45d770730019277075ecf6194285674a0c97d
SSDEEP

384:BrIC1ch6zEkMekM3nn77gkixIWnDwaWGQS9hVaxdwqVlE:Bm6wIq0aWnS9hmdwEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
769eed0ed95e45c470e4bc34eec2bca2_JaffaCakes118

Files

769eed0ed95e45c470e4bc34eec2bca2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE