448da5cdcd4f90941d4b5caad0c5336e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

448da5cdcd4f90941d4b5caad0c5336e_JaffaCakes118
Size

11KB
MD5

448da5cdcd4f90941d4b5caad0c5336e
SHA1

2e684ef93a522afa08d8281c2ee5c322e1253867
SHA256

88075dca64ffcc00de548c6d51a5dd564937e65b9663ee18d2e1a06be636d1f5
SHA512

5f44ab4140b0a662e383ed91cda3fad9220a74d14f732e094de8413350f310802d54ec1c1c1a12d648483f06d852398ca882714148c5b0cc502b44deb5769cf9
SSDEEP

96:EYc0wV01XfvDKVH58tjmtLu3U7msZ74PVELD/5cLmiEFUkputsW8r:Uqh7KJtsUZImiEFputsZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448da5cdcd4f90941d4b5caad0c5336e_JaffaCakes118

Files

448da5cdcd4f90941d4b5caad0c5336e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ