bf76b6c4a4ab062240114df4efbfec53_JaffaCakes118 | Triage

Sharing

General

Target

bf76b6c4a4ab062240114df4efbfec53_JaffaCakes118
Size

293KB
MD5

bf76b6c4a4ab062240114df4efbfec53
SHA1

233251ece8d287223a1bd18c5396e9f453488d9b
SHA256

c0bc026cc7488ad556dcf70bec14170295d37cb9428916f3320981710233b031
SHA512

773186f2732b7d0e07c7993d57cf793406720f59d927478d33b7af073de9d311ab349a6fbb2bcf49a3c4dbc21ac19f4af3662ec9cf19d48f331cac812b8995c1
SSDEEP

3072:Sfr65lQQUFxNMsntpFSFr0bFN7obdltMIR6MgHND9f2Y3P49wJEFaKfCb/aS2G:AlqQpSc7Qf6JHNIYfmF5yaS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf76b6c4a4ab062240114df4efbfec53_JaffaCakes118

Files

bf76b6c4a4ab062240114df4efbfec53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ