44f93192e04264964e704a4b65b9437f_JaffaCakes118 | Triage

Sharing

General

Target

44f93192e04264964e704a4b65b9437f_JaffaCakes118
Size

37KB
MD5

44f93192e04264964e704a4b65b9437f
SHA1

287fc27a3fb9eaaf756136afd818e61bc031fc68
SHA256

6676ec97406d4854f8dcc16f62fcfdf9eaa72dc5ba8318e34279fb38158ebd5d
SHA512

bfde418d57cb66429c98938b0f2ef8586bdec2d4de306b3df17cb3114d564c93f4e6e6c0476d618d811cf836d65d422590eec274e073012cd42b57533795bca4
SSDEEP

768:RQWRPruKPO2DZZzJ6QKv7f/5l6riHTq6v/7N3v2GzC:BtOGZfMD/5l6wTqm/Bfn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44f93192e04264964e704a4b65b9437f_JaffaCakes118

Files

44f93192e04264964e704a4b65b9437f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fef0a72799ba2ab8af7376600d20099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GlobalAlloc
GlobalFree
MoveFileA
SetFileTime
GetFileTime
VirtualProtect
WriteFile
lstrcpyA
lstrlenA
ExitThread
ExitProcess
DeleteFileA
CreateThread
CreateFileA
Sleep
CloseHandle

advapi32

RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ