bcdc25ae4a5a2fcd8c81578f3952e7d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcdc25ae4a5a2fcd8c81578f3952e7d7_JaffaCakes118
Size

30KB
MD5

bcdc25ae4a5a2fcd8c81578f3952e7d7
SHA1

e8429f851ec22c26e91c7d7d4eab804fe392b7b0
SHA256

925dc77ae96d4e75b8f6c2b66e760c9fa81cf5adcc40639bf06fefb7c03dcd22
SHA512

31eb66c67c0477678d5f591c0b7b10575280f8d49b18c424cd977d26998da12e0d78656dc51fcf229a0d639bf32ce7e65fd9b7ae222c3136bf4efe9d497b55d4
SSDEEP

384:2WqhaPTL/T97//4Nsl8DL3kM7JaD75CVj0F/AeIxvCSbYrv:2ZaHr97IJ3kM7JaD75mj0OeIxv3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcdc25ae4a5a2fcd8c81578f3952e7d7_JaffaCakes118

Files

bcdc25ae4a5a2fcd8c81578f3952e7d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ