304f7f2c1b20f32bb368d123d6662304_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

304f7f2c1b20f32bb368d123d6662304_JaffaCakes118
Size

623KB
MD5

304f7f2c1b20f32bb368d123d6662304
SHA1

1934cd0989691e87fd199ee4ee4485968aef290e
SHA256

7f044c4f9657c1c663e464bcd2242f9d209417b67d91e2fa7132028630390e0e
SHA512

c5276e5a385c55f57d5ea7d145d0c889fd181ce704fa4528212c1a9c05a95cde2785619f6f84bef1c31baa0f2006c63ff3cfb3c38bc00da89ca21123a74ab9e8
SSDEEP

12288:FWxPmed/JGXyJWTDI1e9BvdWqv0dL6Q2boBE/gx:kxeedhGtI1GdWqv0dLua

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
304f7f2c1b20f32bb368d123d6662304_JaffaCakes118

Files

304f7f2c1b20f32bb368d123d6662304_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 620KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ