04103fa6b72beb32dc50505e53f2d90c_JaffaCakes118 | Triage

Sharing

General

Target

04103fa6b72beb32dc50505e53f2d90c_JaffaCakes118
Size

55KB
MD5

04103fa6b72beb32dc50505e53f2d90c
SHA1

678b53b1713fc00716c4accb7d11de4a6f344b50
SHA256

a6b622b5aef08f695ce1d3a12ab7bc45be5a455aa9e6f5d93e1c7e4a6226be5c
SHA512

61e9dbf4a5fe826120fa29e2ecf28690e9d70f4e488a210d91c4ef1699491a0ba7eaa76b3c8d9b247ebca71a8206b38141875bbea45029761e912466a6e1c1ab
SSDEEP

1536:M7VSs3X+s2ICeRpF3cnl01EHMhUQSCDKNkTUF:M7MJjCF38MhhykTUF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04103fa6b72beb32dc50505e53f2d90c_JaffaCakes118

Files

04103fa6b72beb32dc50505e53f2d90c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ac564b88683eac6e42e70d74eea0e8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

EnumResourceTypesA
ExitProcess
ExitThread
GetFileSize
GetModuleHandleA
CompareStringA
GetSystemTimeAsFileTime
MapViewOfFile
SleepEx
TlsGetValue
lstrcatA
lstrcmpiA
CloseHandle
GetStartupInfoA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 32KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ