44aa36a114f6c4623b85c06cef163618_JaffaCakes118 | Triage

Sharing

General

Target

44aa36a114f6c4623b85c06cef163618_JaffaCakes118
Size

56KB
MD5

44aa36a114f6c4623b85c06cef163618
SHA1

b9c68bc07d884ea04fd631177398aa2b25191979
SHA256

d1dc1074b74d00eaac27c1555a632d24f4d270aa1ff67edad716bc4719942768
SHA512

c198bdc4ff009946e893ad3aaa3e4fcf04b22cad14d8200e2b790e757d272009cf6ffd75f35acb8a1c0a4c2f9b4178f1498b44b8323d6eb0fad337d9e69274b5
SSDEEP

1536:eVAiuCt/GJKRNIcDcuByzh7Cf4ZXkIxuq5aqSB43+LsOIxawjlLCX:uuS/RXItzhXQq5aBi3y4asluX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44aa36a114f6c4623b85c06cef163618_JaffaCakes118

Files

44aa36a114f6c4623b85c06cef163618_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc56251f540a8e20e7afbe478f4e518b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWow64DirectoryA
TlsGetValue
EnumCalendarInfoW
UpdateResourceW
FindVolumeMountPointClose
OpenProfileUserMapping
GetCurrentDirectoryW
GetCalendarInfoA
BackupRead
GetExitCodeThread
GetThreadIOPendingFlag

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE