02ae284bacd3f32215b9d7fffa662d36_JaffaCakes118 | Triage

Sharing

General

Target

02ae284bacd3f32215b9d7fffa662d36_JaffaCakes118
Size

3KB
MD5

02ae284bacd3f32215b9d7fffa662d36
SHA1

a0d61ba8ff0d9892959ece673bc0da402cee3966
SHA256

e606f8d8c1a3130853ad2fd5bd0c53a9080e48f8b22a3ecb46720461ec68d143
SHA512

f2edf515f5189b44ae4b1554f9b54d3bfc17e6e65a83f697b120ae03356ee0f0dee7105c5c748cf963821785b42607b53c1c477bca4cd876d6b2187aeaf77de3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02ae284bacd3f32215b9d7fffa662d36_JaffaCakes118

Files

02ae284bacd3f32215b9d7fffa662d36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d819c7ac9dd43ef0839dc74e5b7f92b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

CreateProcessA
CreateRemoteThread
ExitProcess
GetProcAddress
LoadLibraryA
VirtualAllocEx
WriteProcessMemory

advapi32

RegSetValueExA
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE