44cc83ff3974a407cdb682d34b85f2ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44cc83ff3974a407cdb682d34b85f2ea_JaffaCakes118
Size

129KB
MD5

44cc83ff3974a407cdb682d34b85f2ea
SHA1

c03f5e24924a2e4587bea19ba762801db4cb7692
SHA256

e8a49c7250aae131a3b79031dc3a128e9126410a97da68c9671673827f224c7b
SHA512

01a59b18b0b2bc5e81226763c909b0d69eb6f3c7583b6ec2bc12d4fff1bcc7fe74fedcacc6dc7ac0ca8e5c067514dd2e2c1491c89da9fc9d10628d4ae5bd8aea
SSDEEP

3072:pFVrrNMBkCOAhrvQ0rJg4fkir7q11ZokulycfJwKbL7Wp:pFVtk+qpukL61K7MKbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44cc83ff3974a407cdb682d34b85f2ea_JaffaCakes118

Files

44cc83ff3974a407cdb682d34b85f2ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 124KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE