887c1f27002d77d1df81b5d0ffa1b1a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

887c1f27002d77d1df81b5d0ffa1b1a4_JaffaCakes118
Size

96KB
MD5

887c1f27002d77d1df81b5d0ffa1b1a4
SHA1

ed279ff6f30e72ee6396a4d9416a6c31df3f270a
SHA256

1a9d757f9b8ab33815589a61d9c3819048b99ce5db41a4562771ba536a8bf1a2
SHA512

3dc167b5fe629533d845bdc9a09dafc2e014f296b0ab97bc11c266ebdaa9946fa43581bec648e17f71c9be8236afcdde0b927bf88a4dd6545043b6cd22654462
SSDEEP

1536:ZhGU2jmS2YyG8rpPHREB55PHx/I7OiPwW/iQ1kgSfjo05/CjvCyZl28y:ZhGU2jmE8rpJEN5Q75VkgSfjo05/MvC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
887c1f27002d77d1df81b5d0ffa1b1a4_JaffaCakes118

Files

887c1f27002d77d1df81b5d0ffa1b1a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ