44ec1685802b6023594e880a29561534_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44ec1685802b6023594e880a29561534_JaffaCakes118
Size

187KB
MD5

44ec1685802b6023594e880a29561534
SHA1

4c02a368029b36eefe7575bd6b83b0dc7ed882dd
SHA256

3a441f9f6d6daa13b973a58fa803b70498593d62623d1f36414a7fc99a2dfb36
SHA512

ddd3459ede45a55e57c4dfc88fa6b030f61e693907971756752352f5db38c554a3a91411a80c2a7d0f39f179e7bdf92959c945448d4c81e73251de81bf764bb5
SSDEEP

3072:WzV5ghpaEYoLalzMhD+xacVqICG4K+WF9ITuZf+P2mTAnwaHbZLS+wlVfBgP52Ni:U5ghpBZGMVsacVqdGpICoVUwa7r4H0U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ec1685802b6023594e880a29561534_JaffaCakes118

Files

44ec1685802b6023594e880a29561534_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0787bf7b247e38aac0a7d1d6dce3d26f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

winmm

mciSendCommandA
sndPlaySoundA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

shlwapi

PathAddBackslashA

kernel32

GlobalAddAtomW
OutputDebugStringA
SetEvent
GetTickCount
IsDBCSLeadByte
WaitForSingleObject
GetTimeZoneInformation
DeleteCriticalSection
ResetEvent
Sleep
GetProcAddress
EnumResourceNamesA
InitializeCriticalSection
FileTimeToSystemTime
LoadLibraryA
GetTempPathA
VerLanguageNameA
lstrcpyA
CreateThread
LeaveCriticalSection
GetFullPathNameA
EnterCriticalSection
LoadLibraryW
GetFullPathNameW
FreeLibrary

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ