44f9312b8d6b1b03e6734f768298a9e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44f9312b8d6b1b03e6734f768298a9e4_JaffaCakes118
Size

91KB
MD5

44f9312b8d6b1b03e6734f768298a9e4
SHA1

9c7296e65d5e3e9f90dd6b23758bf92a8dc32595
SHA256

8439c3e33ac474866f084e2bf4f541830e68d855bbea5129c0acba50d3dcf49a
SHA512

fd4c780d788e900565f49a8d07269ba59599823a86cd363de2ac1f28fcbaac4accd6a07f049ab9b0a4097603ff96c0d216f44bce2074d24df1e1ffd704ec213a
SSDEEP

1536:pgCg0X+O7TTX1ZszR2e/tF2oVStVDZnNgtuNlw1pfgMPKG84nLpLL3Jc1jxbufG7:WCgc4zRV/3XVStJjIuNqfgWK0nRLajxv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44f9312b8d6b1b03e6734f768298a9e4_JaffaCakes118

Files

44f9312b8d6b1b03e6734f768298a9e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c014de5bcfdb20149542a100b2c681f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
NumaVirtualQueryNode
SetSystemTime
CreateProcessInternalA
CreateProcessInternalW
GetNumaNodeProcessorMask
GlobalAddAtomA
SearchPathW
ExpandEnvironmentStringsW
CreateThread
SetCommConfig

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE