44c2bdba78515c6b15c8cfb62a6da0bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44c2bdba78515c6b15c8cfb62a6da0bb_JaffaCakes118
Size

122KB
MD5

44c2bdba78515c6b15c8cfb62a6da0bb
SHA1

0aac32a1104a4a5ec0a545ecf74c95aa6fbd0105
SHA256

c5d0bac8011111a84cfed09bd9ab4c8b6436d8681bcc2858a833a4e93baae458
SHA512

2e269a534427367f7f82a5cc6c86b3b4db01e43f0f0116bef45b053e48b63dac3bf5f327e92f422df7b7099ac25804f0d5667c68dea3311fd71aa0822a9988cd
SSDEEP

3072:LJ9WclSbOCCJ5Pex8rtMEG2dOMDVdTtUO0sJm6LH9mGxdkPNj+HUtGQ9IOOeqm:gktR0j6T7vS+H7q4m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44c2bdba78515c6b15c8cfb62a6da0bb_JaffaCakes118

Files

44c2bdba78515c6b15c8cfb62a6da0bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbdb0525986cb60465f8680544bd9d66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE