44cf9074b1b140bf98a4f52b3c19dd54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44cf9074b1b140bf98a4f52b3c19dd54_JaffaCakes118
Size

6KB
MD5

44cf9074b1b140bf98a4f52b3c19dd54
SHA1

fe212117c2244e20c630a06c07236f923b7430d4
SHA256

12d5cf764943860d93e686aa852dcf9b82a5c20e0df79db60818246669371122
SHA512

66c23d3f99903d9a257ac4a5aabaf6b719e4a575d228a9b43fa96c6393f9238e9f96c1590daf57bfdf6a47b8ae2e7eff955ba36f0e2c3c4c49b7a0623e24eab5
SSDEEP

12:eFGSGqUoIWpPaUYCC5FM7AstwbwDqdP6hZvHZBB0R1X4epJ8:eFGS/UHWpC/5FM7bHqdPAjB0R1IepJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44cf9074b1b140bf98a4f52b3c19dd54_JaffaCakes118

Files

44cf9074b1b140bf98a4f52b3c19dd54_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4b3e8b6576fde7557d9d45f2461faf3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WaitForSingleObject
CloseHandle
ExitProcess

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE