044d236c9c34696284becb89df769057_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

044d236c9c34696284becb89df769057_JaffaCakes118
Size

121KB
MD5

044d236c9c34696284becb89df769057
SHA1

3bb29048267ff3f4466778b44f529ab4ccf97163
SHA256

ed9d744a011424be493010b0508b9d4daf77532bcf4743662de8c4327b350a69
SHA512

9b6d50e5cd3fdda7c0250c7002cb09e3450e4a543201af4143e61f764591b8bf718ef7d5f1da2e60a44d390d95c1cfe62a349be7c0efaf667dbfa4d550e1eafc
SSDEEP

3072:FpngghVbxdAcRX9NSO7/KOYpt43zdjqMEZWyM+CO8PFI:fnzDbxdpXiOzKZptazdDgVMN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044d236c9c34696284becb89df769057_JaffaCakes118

Files

044d236c9c34696284becb89df769057_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e58f0165ddfa80c4798ed6e092e963cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLastError
SetEndOfFile
SetFilePointer
GlobalDeleteAtom
ReadFile
FindClose
EnumResourceNamesA
ExitProcess
GetLocalTime
WriteFile
FindFirstFileA
CloseHandle

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ