44b691084b9c1d774dc75f424c1bd1fe_JaffaCakes118 | Triage

Sharing

General

Target

44b691084b9c1d774dc75f424c1bd1fe_JaffaCakes118
Size

32KB
MD5

44b691084b9c1d774dc75f424c1bd1fe
SHA1

eb51690400f1909810bc8f857fb5344daa3c045e
SHA256

9d917351f38241b8711a23be688433ae67676e94909f6c901fa60d8705548507
SHA512

739801757af5157902c2f6bb8918c1d4c63518f1606e11383d9faa1ba1993f11e9426802ca77f5f7e42c4116f79838ad80cd41a0bd7dba32591ebf759240548b
SSDEEP

384:piYw+aqjqwWVfn1Y1fD/XZBRY1hMSFHcK5WW8yKSPXubTDzhmqkIOI:kM5WJn1Cz/2pWWHPXETA9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b691084b9c1d774dc75f424c1bd1fe_JaffaCakes118

Files

44b691084b9c1d774dc75f424c1bd1fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

910f176b6c7b0fc0ff254ed7770d95b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeThread
GetModuleFileNameA
LoadLibraryA
TerminateProcess
GetCurrentProcessId
Sleep
SleepEx
SetLastError
GetLastError
GetCurrentThread
GetModuleHandleA
GetProcAddress
GetStartupInfoA

msvcrt

strcpy
calloc
malloc
_snprintf
strtok
tolower
_pctype
_isctype
__mb_cur_max
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strstr
memset
strncpy
memcpy
strlen
_stricmp

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE