b37ae7f73948ab996fdf81e4eaed55ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b37ae7f73948ab996fdf81e4eaed55ee_JaffaCakes118
Size

46KB
MD5

b37ae7f73948ab996fdf81e4eaed55ee
SHA1

b36d2572815d52da4670a5d108480f8ecf2b7a96
SHA256

485e654934955767ce1b0e905fdbc6939a0518c132c8eceeecfc46bfa2e90307
SHA512

2cd8ecdd7cf956f0ce9eb40629f163d85dacb76c1e079cfa8049fb420ba0ef744a464c952c87a1a53c64e496ab015bbd73b2c2aefae335d1f9b61980b4dd98d3
SSDEEP

768:jerMShswUh2xB1bwZ0f4iRoT23/JbHjtlc1SqViJal6QRG6U6RGHI03+u48sA/NP:KrMShswUh2xr8Z0fD/VM94ISnVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b37ae7f73948ab996fdf81e4eaed55ee_JaffaCakes118

Files

b37ae7f73948ab996fdf81e4eaed55ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ