27ca5f7c4d4faab4c3b44cf7635a4762_JaffaCakes118 | Triage

Sharing

General

Target

27ca5f7c4d4faab4c3b44cf7635a4762_JaffaCakes118
Size

117KB
MD5

27ca5f7c4d4faab4c3b44cf7635a4762
SHA1

55c1319d59b34b1af27c4324e7782cd510981411
SHA256

ab09dfea63e88bf930d217e2ed66042da9b22a3be5f1ead9fbb1bd0baee18974
SHA512

625afcf0a467b77729c1ed788e260f44265b307ea49379ddf2f1351a5c5c8f476a868d345821fe070950b0afe5e2d6c06ee19fd544d3f937525be829b1c9eb8f
SSDEEP

1536:2u4UaAcbe1B6etbJLkOpMX6KC/C7fvfFWkGa15Z6hOhwhoXJSMAHwe:2u4UaA+q6ettkDdXTXP15Z6gOoXkMm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ca5f7c4d4faab4c3b44cf7635a4762_JaffaCakes118

Files

27ca5f7c4d4faab4c3b44cf7635a4762_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ