44497712344b1c57e79b80f9eb2da79f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44497712344b1c57e79b80f9eb2da79f_JaffaCakes118
Size

205KB
MD5

44497712344b1c57e79b80f9eb2da79f
SHA1

d4b45b13c142390a942bc95fd8e8497873412c90
SHA256

a9b55508c4b4c0a6d2c0a2f3cb0786448853eb9de2e96da33bed0552f21e0745
SHA512

4d553c701487c6853e7cb067965cd311f86f97508009af42d50d04afad00b751fbc9be34958b19ea066021f91a30935259b73724f1025891a770d0423d0d6744
SSDEEP

6144:I3ACELHu7tWsqkzjwA5NpU0f70K02AVlxLbgRPWX:s8LHu5Tqej/10fl+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44497712344b1c57e79b80f9eb2da79f_JaffaCakes118

Files

44497712344b1c57e79b80f9eb2da79f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8a8684d48a7d7419124c9a759631893

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContext

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

kernel32

SetProcessPriorityBoost
TlsAlloc
ExitProcess
TlsGetValue
EnumResourceTypesA
TlsFree
InterlockedIncrement
TlsSetValue
SetLastError
GetStdHandle
GetLastError

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ