d44f35410ed96fba5fba1d6b96a6792b_JaffaCakes118 | Triage

Sharing

General

Target

d44f35410ed96fba5fba1d6b96a6792b_JaffaCakes118
Size

96KB
MD5

d44f35410ed96fba5fba1d6b96a6792b
SHA1

80e79390ee9d4d6c45954d77e0f68cac6eacd673
SHA256

1cbdd24a3d56a72c4c61e93ec680a19c5a58574e1a664fdaae224abdb825209b
SHA512

e723f590b08acc6c3c201db6e889f48c70e5bc196f08492e4c09cda16817940d6588760c21a8c3bd81f88de687f30defc20358a5747492b12430015abbe8d8b3
SSDEEP

1536:uTuSIEP4HSkGcuuIZSeGccOF6jh4+avyD8G/IGebr5AV4RR5efqvpsMym0Xi6cMV:u6MP4y1FSu+1D8NGepAVCRkfqvps9yx2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d44f35410ed96fba5fba1d6b96a6792b_JaffaCakes118

Files

d44f35410ed96fba5fba1d6b96a6792b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9dc40bc17d80c75de09471fa27dd904b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GetSystemDefaultLCID
VirtualAllocEx
GlobalAlloc
SetCommState
GlobalLock
GetUserDefaultLCID

tapi32

lineRemoveFromConference

dsound

DirectSoundFullDuplexCreate

Sections

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ