173b908da7341addc1c6ee97d6f08e40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

173b908da7341addc1c6ee97d6f08e40_JaffaCakes118
Size

14KB
MD5

173b908da7341addc1c6ee97d6f08e40
SHA1

1fc468a7bd3604f8b15f25c4ec4924e687626adc
SHA256

c3a7070fcd06d5ac350ba6607e198c37ca55f84cb0621b2a1eea99ba6e4d2db5
SHA512

31b6a1e0a6765f1a38e6a0f410ddbc2d0552e2528ade8367b07eb779586fff29b41a29daf2ac58a1ffc63f69e8ddb5d0b400ce5ebec0108f0b3a17bdd36098f2
SSDEEP

384:KqhiVl+Crp1icLd2Txn71Z57efuDKwGkdfw:NulhpPLd297J74uDQSo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173b908da7341addc1c6ee97d6f08e40_JaffaCakes118

Files

173b908da7341addc1c6ee97d6f08e40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ