0c1061373c06f691f070911d48a7ebc3_JaffaCakes118 | Triage

Sharing

General

Target

0c1061373c06f691f070911d48a7ebc3_JaffaCakes118
Size

141KB
MD5

0c1061373c06f691f070911d48a7ebc3
SHA1

586352e783d3e12b2bacd4682807b7a7a231a050
SHA256

6248ebd47e9b59012a8c218a12b4375fa3761248a429697993133360c15ed83d
SHA512

01c457bfe1da902b1887a78c53263643c2817855e07109cca0ebc6f91e250bfb1d739861a253fc1fccaff2acd919845bb94b8974815db8552fb28bb22dcb907e
SSDEEP

1536:ViRzHuxU5pf8OPe4DsE+yeff2eHIWlbd93NQGQ9HGCFcecdfMaWQ0BDqnidUZHW0:V6zuxwUgi0BDPqHWy0F0s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c1061373c06f691f070911d48a7ebc3_JaffaCakes118

Files

0c1061373c06f691f070911d48a7ebc3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

api

Sections

.text
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ