b44338fe6bdb60b9c85572dc4e041c77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b44338fe6bdb60b9c85572dc4e041c77_JaffaCakes118
Size

73KB
MD5

b44338fe6bdb60b9c85572dc4e041c77
SHA1

7820e4881ae2bd66a1d63305d8f2455a6b302fc5
SHA256

c9730f39029835e7926f18ffa8b91e508e7dbcbed770d457426c717d8e3a2e97
SHA512

2ed02eb8b5c7e814533e5643728bb568eaf9ae44e71210d1b7cd3286217743844d79cfeeb6c33a00f742ccf93b436536672cf9d5ba25cc9a18f0f03b8dd40761
SSDEEP

1536:XbioQnl0MaGgRnBf6ezG2Phnla1CHdCn1CHWeDjoR3U6TQ:XWJl0bGOke62Bla1CHw1CHdDUR3Ub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44338fe6bdb60b9c85572dc4e041c77_JaffaCakes118

Files

b44338fe6bdb60b9c85572dc4e041c77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61597ffc3eb9f12ccff061cc20a15ea9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessId
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
VirtualProtect

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ