44fa227fe38959cbdc43e0542e6f2764_JaffaCakes118 | Triage

Sharing

General

Target

44fa227fe38959cbdc43e0542e6f2764_JaffaCakes118
Size

174KB
MD5

44fa227fe38959cbdc43e0542e6f2764
SHA1

77f692d53c5fe14b24b6b666d52deae82d5c2737
SHA256

b9caf0a29954b3f66f8be1a0df46c6afc54f3c85dc331c6c49b704a4b7fe08d1
SHA512

0f3e31aedf1d4b2dd90e50d02a993d200703c8c5a0473f64ed9bd1a89acda3ac92f153bd646dd02298f296cc48b3e8a3d3bbee2d7881cb1bb893c040c859184a
SSDEEP

3072:nxy/oXBcT7JkjkstZ1uy/Z17mko9CCA9X4+V5m3M7QtQKp34hLo:nx1xcx8J5uybal9CCiP5slN/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44fa227fe38959cbdc43e0542e6f2764_JaffaCakes118

Files

44fa227fe38959cbdc43e0542e6f2764_JaffaCakes118
.exe windows:4 windows x86 arch:x86

342dcafe221b8535cd145d9e1e696944

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
CloseHandle
LCMapStringA
CreateFileA
LoadLibraryA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegEnumKeyA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 4KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ