102b91530e92b2aa6f6c35559b582934_JaffaCakes118 | Triage

Sharing

General

Target

102b91530e92b2aa6f6c35559b582934_JaffaCakes118
Size

10KB
MD5

102b91530e92b2aa6f6c35559b582934
SHA1

1ba15ac6bc57f4f6ea9a6f1dd87043136f93a94d
SHA256

867407419c7e31d720369eae9a405264c582861a89222f24ed2f6cb21fcc389e
SHA512

0651460a17ed409829b7d65f70b9615cede6f6e75cf634646d09a95eff7efff099968b8b0ac7e46639b2099ceaae0a9caa62d73877355840071d271e5d8339b6
SSDEEP

96:Asc0wV01XfSQKwD3DLmaVF0ybLmiEFUkputsW8r:UqhjKwD3R0umiEFputsZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102b91530e92b2aa6f6c35559b582934_JaffaCakes118

Files

102b91530e92b2aa6f6c35559b582934_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ