146b5fa93efaebf35e9432be32f201de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

146b5fa93efaebf35e9432be32f201de_JaffaCakes118
Size

643KB
MD5

146b5fa93efaebf35e9432be32f201de
SHA1

013a280e0aea6d78dba29f446b4ff48c5a809799
SHA256

db8ecb8d3290e9074e265a1aaa2a26e1e167d55fe85a20828632d7f280a061df
SHA512

06b6d992fd52e0eea3cb0899bdeeb683fad1390b7ac4613b6d0cf55774a7fec010f9f6e0aca222bc451f9f4ce4b6b7b17a964b8729fe7aa18d9a28e497c00ebc
SSDEEP

12288:pxP0Yd/JGXyJWTDI1e9DxWXI0d9MPX5q8Tl5BW:px8YdhGtI1qxWXI0div5l55

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
146b5fa93efaebf35e9432be32f201de_JaffaCakes118

Files

146b5fa93efaebf35e9432be32f201de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ