bd19d4e8df813ecadeb051e435dd1b03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd19d4e8df813ecadeb051e435dd1b03_JaffaCakes118
Size

277KB
MD5

bd19d4e8df813ecadeb051e435dd1b03
SHA1

ff9b65ca431702ac4f065ea37cd829a20c1a113c
SHA256

97b5f678f403a9a97f2b17307b8346e77c9bb3863f6225e3f222ef382d6aca41
SHA512

c8c1cc07e71da080b79c32f4b529ad5627caca42455adc4aa5a2f0f73d0e35a55e31477c0b7e6cb9d99fc5ad168a28ee03468aabb1788482a950978c454d6e62
SSDEEP

6144:nu0Tk4YtWcQ8aoysSJ379Stf8MZ5PBG2au:PTLfcDaoysEr4tf8MZ5PBG2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd19d4e8df813ecadeb051e435dd1b03_JaffaCakes118

Files

bd19d4e8df813ecadeb051e435dd1b03_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ