44309cef599f1fbcead919f00f2256f5_JaffaCakes118 | Triage

Sharing

General

Target

44309cef599f1fbcead919f00f2256f5_JaffaCakes118
Size

65KB
MD5

44309cef599f1fbcead919f00f2256f5
SHA1

18cebe32423a9b7fd9e1606f5bc088ccf5400199
SHA256

a64f01cc9add15acfda9ee4438184e0f6a2268682e13e98ce144a0af194bad5b
SHA512

a5428e48ba36a9f5082868eb62eb31cd46e93b9a4667d298e0c4014d4df535ede2be6d615b151220ac79ed18c792451d49c8251a4d0fc9596fcbdf98d640d2b0
SSDEEP

768:pINeqz7k1dup6qsQ5FevZ0apphLWKVAdcIVK6v1B5mzVlRsdDfeM7wpXhST03rKz:pHZqsttHRIVKI5mO2qT07SA6XtRvEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44309cef599f1fbcead919f00f2256f5_JaffaCakes118

Files

44309cef599f1fbcead919f00f2256f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

822e6272416e3f3224d5a10710bf248b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
malloc
memcpy
signal
time

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 52B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE