44ce42b1c8fa85d93a4507b7f78e3ad1_JaffaCakes118 | Triage

Sharing

General

Target

44ce42b1c8fa85d93a4507b7f78e3ad1_JaffaCakes118
Size

43KB
MD5

44ce42b1c8fa85d93a4507b7f78e3ad1
SHA1

7ac2c5e3127cdaf320feab6f95b8ab66c121d22a
SHA256

f613bf3745a7c522eb69a4aa10f732157237289c1228f2397d2acc700d1e8198
SHA512

98e5eea09e6f96a240eb69739c0be49b0b5ad9ee912770d84de674628b33c131d1b598c1beab952c52e69ece629dbb6221dee15cfb8f388e1bf7452a7f2cb272
SSDEEP

768:IbRtUFHD+d9y6NPJEXogLSqi8/3TdGv4d:AAT6jBksv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ce42b1c8fa85d93a4507b7f78e3ad1_JaffaCakes118

Files

44ce42b1c8fa85d93a4507b7f78e3ad1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f43413e4cc805bfb19e82f49b9046ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateThread
DisableThreadLibraryCalls
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
IsBadReadPtr
IsBadWritePtr
Sleep
VirtualProtect

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
strstr

user32

GetAsyncKeyState
MessageBeep
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ