94d4abf8cacda2d64963ce5f6f7f0398_JaffaCakes118 | Triage

Sharing

General

Target

94d4abf8cacda2d64963ce5f6f7f0398_JaffaCakes118
Size

3KB
MD5

94d4abf8cacda2d64963ce5f6f7f0398
SHA1

9b504c1c8ed8b55b3c6db3acda4ceb1ae65adeb8
SHA256

45e28fd7efd385a70b0a4e8734aa1cd664735e8396154c45fa48300b5deab587
SHA512

fc4162d9bd69348b96955d675f7d12960ac6851f5642d34c4d18bd6c41ed83b8609a1a42e6eb73bbbaeb04c63e019e396487de7975b8b7a5423f3d858f2d07b6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d4abf8cacda2d64963ce5f6f7f0398_JaffaCakes118

Files

94d4abf8cacda2d64963ce5f6f7f0398_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f768e2ce49613895a46bfbd6bec7b31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
RtlFillMemory
ExitProcess
DeleteFileA

user32

MessageBoxA

advapi32

RegCreateKeyExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

SHFileOperationA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE