b4a1b564f48a3af5ec48253677af49f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4a1b564f48a3af5ec48253677af49f6_JaffaCakes118
Size

34KB
MD5

b4a1b564f48a3af5ec48253677af49f6
SHA1

cd800c35a20ffbbcf5c23cc11f537457c36d7826
SHA256

c817ae90b3ff633755f3b1d825674722674ad9b2d0fe760256f47a66f3e0cfc9
SHA512

759127622adb5541d90352c9ed8e967eb885181a37b791d02fbf21a3d6cd85d525a4e0b8140a372761552be59185d22fc6d2e67fc5426127f04dcc3b843bc158
SSDEEP

768:I1jGvenBuNM10QQwXGA6UA6zIe2gxuefEYR5Lp:I9G700QQcG1d6fcefEsF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4a1b564f48a3af5ec48253677af49f6_JaffaCakes118

Files

b4a1b564f48a3af5ec48253677af49f6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ