788d264f47d9dbcf64b4f5241421678a_JaffaCakes118 | Triage

Sharing

General

Target

788d264f47d9dbcf64b4f5241421678a_JaffaCakes118
Size

627KB
MD5

788d264f47d9dbcf64b4f5241421678a
SHA1

c53775ed6a4d58f2c01f27515edff78cad4c1194
SHA256

ca599296131684a3a2ffc1161dcbe601ce75ab588b370dd7a6f3724814d23595
SHA512

e73721d9aa6e00f76f75c84f12e6ae3e3bdc0342731f641f297fa69ceaa7257fcebb60a8d3be2cfc03812287b70471163768ceb0c0a94893c6e46e4cd51e7520
SSDEEP

12288:vhQU3Oi3utFExMAbTKBowyBggxiREFZQU3k:ZQU3O/XkFqB7bgxHFZQU3k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
788d264f47d9dbcf64b4f5241421678a_JaffaCakes118

Files

788d264f47d9dbcf64b4f5241421678a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 526KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ