44cfbedb1d5bba819f7362af10672cfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44cfbedb1d5bba819f7362af10672cfe_JaffaCakes118
Size

65KB
MD5

44cfbedb1d5bba819f7362af10672cfe
SHA1

ad9340fb24ff258f70ec5f983e878bd021ffccbc
SHA256

dfffefb2daf773dd900c1286752d1876b15a4fde385cf41ea81b1bf3c0eced93
SHA512

3ecc78800645c5e333737db88c55d2b71778a7bfbd759e2ef08ea14c012ed82796c03f07384a560f93909b0a093920ab5daffb37a7811424a6ba53d775fa6a46
SSDEEP

1536:n3p5GLMNmCBq7hFY7GsGeHCbFzadpwWHz25dNGzlBmB:3GoAQ76HbFzadpLz27ABmB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44cfbedb1d5bba819f7362af10672cfe_JaffaCakes118

Files

44cfbedb1d5bba819f7362af10672cfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9f64efe8743828c40abbf9a3de7b74b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
DeleteMenu
DestroyIcon
GetWindowTextLengthA
GetMenu
DestroyCursor
LoadIconA

comctl32

ImageList_Destroy
ImageList_GetBkColor
ImageList_Draw
ImageList_Create
ImageList_DragShowNolock

kernel32

GetThreadLocale
GlobalAlloc
VirtualAlloc
GlobalDeleteAtom
GlobalFindAtomA
LoadLibraryA
GetCurrentThreadId
VirtualAllocEx
ExitProcess
GlobalAddAtomA

gdi32

GetClipBox

Exports

Exports

_7Kbgnblg@12
_mRzLJohi@4
_SeVzHEnTs_x@20
wG7QLbFu
TjBrr0uI9Q
_480oJJ0voka9
wrZQY4AQVe8Ioc
PHS53v@20
gABr9GuhP
Ioy6sZICFfUFPz@24
u4lH_4rfm
vgtba@24
pnKCN05@24
qGy2N@8
JSHBcZnUw
_RUALTcEapuhp
EMKbGvpvExo
_wbymUdbo@12
_WZiH8rBSpYkY5@12
_W7GX40HPmW4qr
_8jABBuLUQku1S
_ImwOPN9OBZ
jGypUwbj_n
_6jbuVEyeBLikB@24
_dQa6FBzV
EV6tkYf9bBq@16
_o0kFLOgVksY@12
_22siv0t7cuB3J

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ