962344d5ab33f759757e3910a456fa0d_JaffaCakes118 | Triage

Sharing

General

Target

962344d5ab33f759757e3910a456fa0d_JaffaCakes118
Size

974KB
MD5

962344d5ab33f759757e3910a456fa0d
SHA1

4aa7d7c62f032368c8c41b52f0fdd04c12fd8a7f
SHA256

19624e02fc560aea0aef6e392a3defcfffb9afed208babb32d009e6590f8812e
SHA512

98989d95ed05e73c46c83deb07035e2826c69a341a85a3e0b55ccdf53a4ec0b1655b5451ebdace19fbf8549ca65b66191a11efe2d01095618c28c088266dca81
SSDEEP

24576:aJCU5JAiXLP9kxTS4JSkV26VhBvJ11BzzPDy05dNTf/4eF63iIRVOLm0b:cCAPWxO4wk8uhVJ111bDyEdNrdw3jRg/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
962344d5ab33f759757e3910a456fa0d_JaffaCakes118

Files

962344d5ab33f759757e3910a456fa0d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9fd5c54ff184f848dd2dea3636258e09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary

advapi32

RegQueryValueExA

msvcrt

malloc

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 50KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 911KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ