3e2b86a1106031cfe0c6c378199d341b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e2b86a1106031cfe0c6c378199d341b_JaffaCakes118
Size

15KB
MD5

3e2b86a1106031cfe0c6c378199d341b
SHA1

713519db89ab4d8b035d441b5152bd91c887ca67
SHA256

b3b782a31be4394676d3a353def29d9c6e2ae6caa21ed7d3d3ffcc7b1980a5e2
SHA512

6eef3925ab57675121477fb3b6c914ca06c2f1170479e72725b3a9ae6aed4cb5299e35a1b155b80459371f1776762bb3a9fcecd93cc41befd05c992654e58537
SSDEEP

384:QqhpM9NvbrJomvNvbrJomSe7Wa02ejfeYdOMN96GjsKgw1lNvbrJom/:rpWxdx4e7Wa02ejfeYdOMN96GjsKt1lz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e2b86a1106031cfe0c6c378199d341b_JaffaCakes118

Files

3e2b86a1106031cfe0c6c378199d341b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ