efe9553224fe2e7dae0409f18666b7f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efe9553224fe2e7dae0409f18666b7f7_JaffaCakes118
Size

2.7MB
MD5

efe9553224fe2e7dae0409f18666b7f7
SHA1

70a0614247cf6c8c1a43bb75ae0f519b2cd8a331
SHA256

ebfc8721de2853326be7d2c835b6a4e4d584d5023d827900a6449b929bcc2c8f
SHA512

5c78ccbb0ead3a7e31364099c78b478ca8b5a37d154d1a84b3bbb57250559c991e69c5b5650c4043e2f0c80cdbdc3566e5dbeee71fc4c08f762061418a9a5433
SSDEEP

24576:WczXdAaH/I48t4MhkcRmvSBrtJSprWEVbbyhvalR12vpG4/HkcWjBbrz/ILJG/DZ:Wc76HPdPS5beiNC+vyS23xIlFv30p6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efe9553224fe2e7dae0409f18666b7f7_JaffaCakes118

Files

efe9553224fe2e7dae0409f18666b7f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE