fb40686f2d55839710e760b359a92708_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb40686f2d55839710e760b359a92708_JaffaCakes118
Size

126KB
MD5

fb40686f2d55839710e760b359a92708
SHA1

1a30ed91bfd60fb1650579de02dc1418bc2beae1
SHA256

141617cf8dbd34944c2696b1709bf0c3be11bd1fde5981f47865ea16e4283478
SHA512

7b9c3f94177f7e99675ae7e893733a52a5102a575986bcb2434b533c5eb77aab9ae4f4f3d1678a9d43374c11c1c5e868e60664917f3d5742ec79853b873dae65
SSDEEP

3072:dM0jk8Vl6e2DNW6u7ipQxAT8+KWEENJ+vN2nIFnj:6yNVl6lUiLTEEb+vN2nY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb40686f2d55839710e760b359a92708_JaffaCakes118

Files

fb40686f2d55839710e760b359a92708_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ