9feef551ab4844ccd1f1804bdb1c710c_JaffaCakes118 | Triage

Sharing

General

Target

9feef551ab4844ccd1f1804bdb1c710c_JaffaCakes118
Size

42KB
MD5

9feef551ab4844ccd1f1804bdb1c710c
SHA1

a8c2895820af654c8c68b9b0dda7bb8a1af0e18a
SHA256

7ab30f4919a5c0534e80b60362a59286a915ac2442815b2016c3525b7386fb54
SHA512

f10c9967f8cf8708c20784bb2a37d266fbe48860f2de83da0eec4fb7cd45b50cf9c04a518e43da7b34b4586d03544bb659fde8d10cecbd8b6b5f22dd9e82be83
SSDEEP

768:7KhZaHDga61n5LM6T+WLcoIOOvMOc31aegNn:7hDgr1lM6T+WLcoXMM1FQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9feef551ab4844ccd1f1804bdb1c710c_JaffaCakes118

Files

9feef551ab4844ccd1f1804bdb1c710c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE