444e162dc69e2d65cd9c0978bb29e5d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

444e162dc69e2d65cd9c0978bb29e5d3_JaffaCakes118
Size

41KB
MD5

444e162dc69e2d65cd9c0978bb29e5d3
SHA1

93cd79c84c58d3d53351278b7996674050a8b0a3
SHA256

e11ee5244864aae51187ad9cee3895399d9836915b0641b64f5324c448ec75f7
SHA512

3504c3b9477aa069473d4597bf6129d6a07b4a3943ed366a00b813f44286d4aa55106fcbd37da64db92d1d7a927a1acbf2e7c4f7429656a4a0c3ca5f15f8b5f7
SSDEEP

768:JbTqavYjTvEBTfVDAyNX8PFOJ40feIaFzSUqSH3UxG:JbTqBjT8fhAyF8NKeIaJExG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
444e162dc69e2d65cd9c0978bb29e5d3_JaffaCakes118

Files

444e162dc69e2d65cd9c0978bb29e5d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

054e4e5c28d6533b44ae24cbf3e08a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
lstrcatA

user32

SetWindowPos
AttachThreadInput
SetForegroundWindow

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ