44b9b4bd2bcb34103b01880e08c9bdeb_JaffaCakes118 | Triage

Sharing

General

Target

44b9b4bd2bcb34103b01880e08c9bdeb_JaffaCakes118
Size

12.0MB
MD5

44b9b4bd2bcb34103b01880e08c9bdeb
SHA1

dab744ef57adc222ef14b45f99d1bbc87e75f623
SHA256

fd7c29d4505e3c08ee2fe2ed15498ce628477b039b24a2ef6bb272d6bf60f33a
SHA512

0b389debbfe4dab10f874988e06ddc08d611a3a98d20276794b00527d27b890aa4c107b4f16dac5a9d8037e19fea36a54e0a681a68d94acb9a3b5b424a9a2fca
SSDEEP

96:1uanm3ujCwMsfu5mt3OVPZNALfBv/ymoWFKlaAZSAU8cSoGW689vpChFZ6tboynE:rm31wduG40fdKvTZV+3GRwpCl61oynE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b9b4bd2bcb34103b01880e08c9bdeb_JaffaCakes118

Files

44b9b4bd2bcb34103b01880e08c9bdeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a886333b759c20e7b68a5b7596ee3cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
lstrcmpiA
WinExec
SetFilePointer
CreateThread
GetStartupInfoA
ReadFile
GetCurrentProcess
GetProcAddress
GetLastError
CloseHandle
LoadLibraryA
Sleep

user32

DispatchMessageA
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
LoadCursorA
LoadIconA
DefWindowProcA
wsprintfA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
SetTokenInformation
DuplicateTokenEx
OpenProcessToken
CreateProcessAsUserA

msvcrt

_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_strcmpi
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

wtsapi32

WTSQueryUserToken

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE