54ac6fa41e1031fa5558dc0cb71b6319_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54ac6fa41e1031fa5558dc0cb71b6319_JaffaCakes118
Size

1.4MB
MD5

54ac6fa41e1031fa5558dc0cb71b6319
SHA1

1390e7bffc47bbd2ed2c3bf30eb66872bbad1f78
SHA256

e84c7a8ec49b15c7db5920e075c916caa82343c0e75e572b0662c4c2b096b37f
SHA512

56967b26accc9ec33bf91a5731ec1ce6a2686fb56d47b648c06df103fd684a07fb76b3e818b226873490d920ebbe52c6742b76a823d050d419beeca804db5150
SSDEEP

24576:sI8yJjE6+bhiHYF5kZI6uOrRUjYNXXYA/ZH/6Mv:sI8b5i4u/q+XXYwBv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54ac6fa41e1031fa5558dc0cb71b6319_JaffaCakes118

Files

54ac6fa41e1031fa5558dc0cb71b6319_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ