44988e0ba6d9cd351f432c8ebca8604d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44988e0ba6d9cd351f432c8ebca8604d_JaffaCakes118
Size

336KB
MD5

44988e0ba6d9cd351f432c8ebca8604d
SHA1

e5ec05934f3492d0b0ab3220decbf6d20792dd0c
SHA256

bc716f854d7e1a1c38c9ba68e703cb4c9e1e31e919b41bb7bd8db0b31fd8a55b
SHA512

bf314e45b67dad4a440c2613ac865cfa9fc73af79d49b918f7310b65bce9c40b099ebe76e2f0837cdcf2430b1a87e7538aec1231069881203a760e0980cf2072
SSDEEP

6144:6JsiAoaNc5i/tQ7dR3z9fXKD9a/RkKlMBrBwxTfRIPeh6GlyEHq/9Y79VZ13:kkNc5n/pX7yBrSRI2Plc/uJb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44988e0ba6d9cd351f432c8ebca8604d_JaffaCakes118

Files

44988e0ba6d9cd351f432c8ebca8604d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

372cb1afc2a93c932bf474b9fcb8cb7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualProtect
VirtualAlloc
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 325KB - Virtual size: 1016KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ