8d7503d85a7a403b14c4051f48ea041f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d7503d85a7a403b14c4051f48ea041f_JaffaCakes118
Size

96KB
MD5

8d7503d85a7a403b14c4051f48ea041f
SHA1

b590292f073b4ccb40878e698a7c59572eb6804b
SHA256

599e096450cdbff9e09fca70664cb6e67e13d0e8b37006533c9e1c89330a6f39
SHA512

088c2fcf6446449c4e2a4732e3a173e35c5472647ea0630001591fc9dad2c10bb325d89adfafc396a0d932024aa3357570dabb52f7b4236d414de66e3fefdb5d
SSDEEP

1536:ZpGU2jmS2YyG8rpPHREB55PHx/I7OiPwW/iQ1kgSfjo05/CjvCyZl28y:ZpGU2jmE8rpJEN5Q75VkgSfjo05/MvC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d7503d85a7a403b14c4051f48ea041f_JaffaCakes118

Files

8d7503d85a7a403b14c4051f48ea041f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ