2bf66f3698c24e2efec72e71b6fa09f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bf66f3698c24e2efec72e71b6fa09f9_JaffaCakes118
Size

296KB
MD5

2bf66f3698c24e2efec72e71b6fa09f9
SHA1

5a3d482b67b5d135292348921bdedd74ad777317
SHA256

4effbe4c648bf5f3d9557a5595edc8700b18dd33081f972fcdaecfe4cfdf1649
SHA512

b9aecdf12e40f4b7f4528f6c8ad4899ad54cd6451666862101ad7eaef4f8eded1d272f8ca2a887aeee3460be1a132c2691994c21042dc723b74979eca06b5a29
SSDEEP

6144:JZo10tiOlSXlLTk+/AqDRKPZfX/F85hfmQYw:J/tiVJAqNKfPOulw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf66f3698c24e2efec72e71b6fa09f9_JaffaCakes118

Files

2bf66f3698c24e2efec72e71b6fa09f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ