a670f32414d1db82e34c4bbe1186838c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a670f32414d1db82e34c4bbe1186838c_JaffaCakes118
Size

90KB
MD5

a670f32414d1db82e34c4bbe1186838c
SHA1

6310860c238409752f49debb1d9dbf1baa633960
SHA256

1cb3eea114768c7fd2ab2de52dbe3759e6d49d95c042809bf27dab5535897671
SHA512

ff5b2e5a64b07240b5d893f4e0d6bc5d21c8c52df377fb255ffdce4e58ae89ee61d2a4600093f46130d5ec31661a85a36116976da49516f304eede206d671349
SSDEEP

768:IcQjA0ANOaNUA8r+j/qL5ERDI3waUEny8WiIi+6Z5vPZSVA85pfkqB+rcu/cJgWJ:IcQRAbz7KVnnychbvEAVnGgW/RxUM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a670f32414d1db82e34c4bbe1186838c_JaffaCakes118

Files

a670f32414d1db82e34c4bbe1186838c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ