44ad799e66c10ac4db9d7c84aba7e75e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44ad799e66c10ac4db9d7c84aba7e75e_JaffaCakes118
Size

52KB
MD5

44ad799e66c10ac4db9d7c84aba7e75e
SHA1

459626d5ee797416743338e55d6fc89539907ac4
SHA256

9819187f1a248550db07b23f1478a51c907a4057af9c22795adf89de1294c9d2
SHA512

96ab0950f0ec22af27f039994d721f65a371639a3e7d96ce7f24d6e6722d30049a7b29c69cf74f616aa8d3e6c322e74baa60a0805c68e87afd95b75f93c65a04
SSDEEP

768:qhAMIUQKo+MVTQvmg5OBW6jrIXKE/3u6+WX1it2n4rD+A3xWl+:quMv8j0OBTnIXKu+XGixrDxBM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ad799e66c10ac4db9d7c84aba7e75e_JaffaCakes118

Files

44ad799e66c10ac4db9d7c84aba7e75e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37ab09a6edbf9fbf08aa53c4b4e64002

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
lstrcmpiA
VirtualAlloc
VirtualProtect
IsBadReadPtr
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

DefWindowProcA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SendMessageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA

msvcrt

_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
free
_beginthread
_exit
malloc
exit
_acmdln
__getmainargs

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE