283af8a9d680a9f24c5d75bffea5f930_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

283af8a9d680a9f24c5d75bffea5f930_JaffaCakes118
Size

286KB
MD5

283af8a9d680a9f24c5d75bffea5f930
SHA1

985db320f3e1d018c1e5fd15258a93ac62bda98d
SHA256

7d9a00a51f3c5b125b1c957260fa2455bfa34899f4d4c3e506aef1f9e7e6aaaf
SHA512

474259db43de80980060976751f220f2ddaf7c04afa9384d8d6182da147b19f81be8d6b0402876bb33d29cddfe9a9e10c84bc49743f523fb9e47474f73f4592e
SSDEEP

3072:e6wl9YjUsxNXIt8ds90CaNxwNQDs3uI1501AuP46swGo19wX5mGh8enXIIJ1X2G:QYHYtWs9CwtFr6swGo1gmGpp1X2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
283af8a9d680a9f24c5d75bffea5f930_JaffaCakes118

Files

283af8a9d680a9f24c5d75bffea5f930_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ