84356ffa4ecffef794256df0ccc8647b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84356ffa4ecffef794256df0ccc8647b_JaffaCakes118
Size

48KB
MD5

84356ffa4ecffef794256df0ccc8647b
SHA1

c59dc0a620d5435e82a78086d531a8aa6ecd4706
SHA256

bb9eb7dd889e845a697d8071adbf7924e8f2f5f69b555b4702e52afbb3294726
SHA512

8a447b4b6eedf2e8a8b219fa623afe16a59ce79cbf9a95084741f00efee53f8b22ed6accdf95c98859c5cd85b317c97f4ca43e6e74912f951b4838e5ee1f94f0
SSDEEP

1536:ecKOZDHvi2+ddlJhhEo+SBn1FWlkKRH7A/oM:ecKOZDHaPXhdQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84356ffa4ecffef794256df0ccc8647b_JaffaCakes118

Files

84356ffa4ecffef794256df0ccc8647b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ