0444357149bf8986804daa771bd7f67b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0444357149bf8986804daa771bd7f67b_JaffaCakes118
Size

66KB
MD5

0444357149bf8986804daa771bd7f67b
SHA1

b58951abf5a1b4ee4e30dff9c2a1ea7b768c8935
SHA256

104569ed6b8a5bb75f5b55a2a3a6b25a75550923010135a82cd97ad03fb599b1
SHA512

8f7d35a3443471fe1f273a9bd58cd611772e1b6ece725e02c0ce1d4c3dd07efa9a0e49949a520f1876370706547004fb04f55877a0dd6be742154a603f83ff58
SSDEEP

1536:jU2nlAOMsMbdUT27gcOziqrzau5u89lV6P+gksjn/5NBfSjUT:Y2nlAOMsDKMAqHawNlsP+mxNBfSI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0444357149bf8986804daa771bd7f67b_JaffaCakes118

Files

0444357149bf8986804daa771bd7f67b_JaffaCakes118
.exe .js windows:5 windows x86 arch:x86 polyglot

19cdfb1254ab5e47cf2da8e90378bcfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\c++\Standart linking\Release\Standart linking.pdb

Imports

user32

MessageBoxA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv

kernel32

GetStartupInfoA
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 645B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ