bae32ca687c91163093752afd0d7d015_JaffaCakes118 | Triage

Sharing

General

Target

bae32ca687c91163093752afd0d7d015_JaffaCakes118
Size

19KB
MD5

bae32ca687c91163093752afd0d7d015
SHA1

3fcc857d7432fe50c6966d30128418268033786f
SHA256

4137878d19a64cae9dadaad5e478045fba852b351e84a2332887536fa3ec9995
SHA512

ad2624e52bd9f131febd90a61bbe5b170f7c00eebb9c11709d1ea21d3202f141107d56b350101b75c0a5bde193057dd7b8ef8c463cab8078289381f60c89edd9
SSDEEP

384:9qh2RUU3FG3UFpgXng4jdBmgKEv8DDV6FSspYRouo:05U3FG3U3n4jdBmTEv8DDQF53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bae32ca687c91163093752afd0d7d015_JaffaCakes118

Files

bae32ca687c91163093752afd0d7d015_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ