279c448aa8c6cc0df32c4c6a5d73ec21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

279c448aa8c6cc0df32c4c6a5d73ec21_JaffaCakes118
Size

207KB
MD5

279c448aa8c6cc0df32c4c6a5d73ec21
SHA1

acbbb6f713b3509699e5fddc18c20cb536d0478b
SHA256

749c76839a47724e886d50237d7f9b635adf44bcb190b6ba7813467f00376cdc
SHA512

768d6baf29ba384f3c3696bdcd810d6c5458cb087540aa8de6b4cf850df929fca9b4104773eabb48e0e2ef91c14b2b191c8cc431c40dfdb1faad20b818c6a844
SSDEEP

3072:CfI1w/rqECf2TSvS4D7jtJFSNCxRkupo5dv6wpr/s6PExEOo8+/kxOaAJmNG3BZm:CfVVxT2SC7jtJrKuNo/bNEODwokXf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
279c448aa8c6cc0df32c4c6a5d73ec21_JaffaCakes118

Files

279c448aa8c6cc0df32c4c6a5d73ec21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ