44d34d3f9f7ccdbf864256a9c40047d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44d34d3f9f7ccdbf864256a9c40047d1_JaffaCakes118
Size

335KB
MD5

44d34d3f9f7ccdbf864256a9c40047d1
SHA1

6baa2e528d929e6cb89973d0ddfde66edb5b6e9e
SHA256

65e3d82ff4292cc223f239caaa3061dabc220154c434ea7683e7d92724ead898
SHA512

073938af21e44f5ad9d742b0fc11f4f8b8beaa4481651271d80841671da131b633dd6b8e7fc0f042ae72ee6fbad77658f6700279a8e2e6d1f248290875e01d59
SSDEEP

6144:I455vlutHqxMH2qH6aRAxn/85WT7YvihGQ4xT3RS2HkR6iZPsqRBl:JnvVMWqH6aRAxkM3YahGQGhSciVs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44d34d3f9f7ccdbf864256a9c40047d1_JaffaCakes118

Files

44d34d3f9f7ccdbf864256a9c40047d1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3b0451478b958b1485ace15facba931d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
GetCurrentProcessId
GetTickCount
GetStartupInfoW
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
GetModuleHandleW
GetCurrentThreadId
LoadLibraryW
QueryPerformanceCounter

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 142KB - Virtual size: 563KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ