44e0e34dd2c44265ebd97967ff55f428_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44e0e34dd2c44265ebd97967ff55f428_JaffaCakes118
Size

16KB
MD5

44e0e34dd2c44265ebd97967ff55f428
SHA1

4551ccac06e0d33df87a0a3bbbacfa562dd13415
SHA256

ea0f2f59941a31e37c50588b9d4f0d25698707cb410a36afa411b520695167f4
SHA512

3ad69e18a5a055c459cb966948fe2d79aa98f432a7dd2cd04ee80720fd096141798a21543f4b6dc0ee2b7e0249e4318004ab73e46cabb0afafd71003724fa07e
SSDEEP

192:+5WIRcuzWxmGenWdPFroMrCY+MFHt84dZ1uxLIuXa3AzI:+LjsdPFEeHKGZ1u5IuXa3As

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e0e34dd2c44265ebd97967ff55f428_JaffaCakes118

Files

44e0e34dd2c44265ebd97967ff55f428_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efc21046c2397d720097bfdfee479026

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetLastError
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary
ExitProcess
RtlZeroMemory
TerminateThread
TerminateProcess
GetSystemDirectoryA
CreateFileA
CloseHandle
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
WriteFile
FlushFileBuffers

user32

DialogBoxParamA
LoadIconA
SendMessageA
SetDlgItemTextA
EndDialog
GetClassNameA
GetWindowThreadProcessId
EnumWindows

comctl32

InitCommonControls

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ