44364a072cb7cf675d76dfa6c04ef61f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44364a072cb7cf675d76dfa6c04ef61f_JaffaCakes118
Size

44KB
MD5

44364a072cb7cf675d76dfa6c04ef61f
SHA1

722ef194092d928555dcf5b912ed5e200727c524
SHA256

25454f256d5f1a96a1bb27c9ef37a4f5f593e18181f13599f453c703d67b05ac
SHA512

b76b4aaf5f04b1b5c3a8a5cdf905eaf40f83c23725e91ca10f20899eab3f28b60c96293517df591e96b2e228d9e67b73b355376d0f5a9ec2c8f2f0b6cbad5e16
SSDEEP

384:jifpzcaIDiHU4KGGbsICkteYph+fztUmTdVP:ApzcaImHJGltD+xPd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44364a072cb7cf675d76dfa6c04ef61f_JaffaCakes118

Files

44364a072cb7cf675d76dfa6c04ef61f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6be070cacfcf80b39245e48ea2961613

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

advapi32

StartServiceCtrlDispatcherA

kernel32

GetProcAddress
GetModuleHandleA

user32

wsprintfA

shell32

ShellExecuteA

ws2_32

getservbyname

mpr

WNetAddConnection2W

psapi

EnumProcesses

Sections

.text
Size: - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stub
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE