44daafb3fbdfffd3e1e986ecf90d0cb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44daafb3fbdfffd3e1e986ecf90d0cb7_JaffaCakes118
Size

38KB
MD5

44daafb3fbdfffd3e1e986ecf90d0cb7
SHA1

81cd4f1e5b0df2a1945a97a53702f4d3e1ff27db
SHA256

cdec47adecb34cebc5bbc7101f62cf96f05ecc060f241a7cfdf69b3b5033f9cf
SHA512

6976de16f788f87f7765788011323918a4f572002a043d03aa1012b17dfa24b76db8751313488ec2de8798e1e085499f7c799ed42cc529678f039e5611dd03fe
SSDEEP

768:EWceAo7l8rthjbucqPRWfd+x/uXaIyg3tMh8oWBB2V00R57iPb+N2Gs:EWHH7lY+TlbIySMhzW/Uub6y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44daafb3fbdfffd3e1e986ecf90d0cb7_JaffaCakes118

Files

44daafb3fbdfffd3e1e986ecf90d0cb7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c0f64b44ca0c850acd079ea96228ffb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CloseHandle
ReadFile
SetFilePointer
GetCPInfo
GetFileSize
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
GetProcAddress
LoadLibraryA
CreateFileMappingA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ