44bdf42ad146af1683320e8dee446b22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44bdf42ad146af1683320e8dee446b22_JaffaCakes118
Size

57KB
MD5

44bdf42ad146af1683320e8dee446b22
SHA1

ea5d3333895ce73918055679b6f79499bde243ca
SHA256

cdb882a6161177df5c4699c0dc954b0a6dca595e8406cf1d570933be056030f4
SHA512

a97c0298e3f77aaf665e03a99586ec3ae962b3cee46c037184f1cf9aac67d912e7a0197da95a252e48fec5feadfb5e4a67dd6cf8a4c9c473842c34cfd70e1280
SSDEEP

768:+xEJOo7sD2A8x4ayucUJz0Bs9c0wLVEzRcHK7G4AJV3srgoBFvd:D02rx4k0Bs9c0wGzRKqOJVutFv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44bdf42ad146af1683320e8dee446b22_JaffaCakes118

Files

44bdf42ad146af1683320e8dee446b22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c0d4bf36434afd4db7af8d945e8c637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileA
WriteFile
CloseHandle
GetStartupInfoA
CreateProcessA
GetModuleHandleA
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ