JaffaCakes118_44d76a8755e23030c5594366efc323e6 | Triage

Sharing

General

Target

JaffaCakes118_44d76a8755e23030c5594366efc323e6
Size

161KB
MD5

44d76a8755e23030c5594366efc323e6
SHA1

ef591b1959c1387d4c08957f3b832a6cace66938
SHA256

4e78b2fae539e3e9ed7fc2b755be1b590c3dc2891ee7011a44f8fbf23e6ec2d1
SHA512

29cc520d2da1a179ed84fcbbd82477903957d39e181422916a8dff77bdb35cb201112b54c28058c98192bc3621ad6a0e8f0c2e2418151c6d1a1e4562a25e03c7
SSDEEP

3072:kojx9B/pFtWUL2bICrLBT48/KQ3gr81sRUTYa0BkZg9EzpAdSuPY32nVutG1lZNv:koV9B/pFtWi2bICrLBs8/KQK/ZzkWezm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_44d76a8755e23030c5594366efc323e6

Files

JaffaCakes118_44d76a8755e23030c5594366efc323e6
.exe windows:4 windows x86 arch:x86

b2e07a931ecdf3ddeed4055b21ba5d13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

ValidateRect
InvalidateRgn
ExcludeUpdateRgn
SetCapture
ReleaseCapture
RealGetWindowClassA
GetCapture
ValidateRgn
GetUpdateRgn

kernel32

GetNextVDMCommand
FileTimeToLocalFileTime
SystemTimeToFileTime
FindFirstFileW
GetLocalTime
GetStringTypeW
SetThreadPriority
FreeLibrary
FindNextFileW
FindClose
SetErrorMode
LoadResource
FindResourceW
EnumResourceNamesW
SetCurrentDirectoryW
RegisterWaitForSingleObject
CompareStringA
FileTimeToSystemTime
LocalFileTimeToFileTime
SetEnvironmentVariableW
GetShortPathNameW
SearchPathW

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ