JaffaCakes118_44a4faacbcbdc4cd5246af1085d5b323 | Triage

Sharing

General

Target

JaffaCakes118_44a4faacbcbdc4cd5246af1085d5b323
Size

165KB
MD5

44a4faacbcbdc4cd5246af1085d5b323
SHA1

12222e8c2145f4b360267e480c22c68b7b714c82
SHA256

7c46c16981a05b5c13e6ca25ca97536b7a1c587cff7b33e558d7315af4756411
SHA512

07e384b5ce81f1b9ed443578393cf0e227cb7411b340aae8a33a25d5493cba3e35150b57175dd9effa3d8fa081c282fc83cc96ad561efa579aaa7606b665e42c
SSDEEP

3072:hMMbRiYd8r+FnuJ2PaCZwXPlbPXHVO2oBvQ6xNDCnz1dShLeA184Uum9xVp:hzb0YdE3Ehih1PoBI6HDw11A184UTxV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_44a4faacbcbdc4cd5246af1085d5b323

Files

JaffaCakes118_44a4faacbcbdc4cd5246af1085d5b323
.exe windows:4 windows x86 arch:x86

c0754703a372a53ac109772ff3b1721f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseInitAppcompatCacheSupport
GetProcessHeap
RaiseException
GetSystemInfo
QueryPerformanceCounter
HeapAlloc
VirtualQuery
IsBadReadPtr
VirtualAlloc
EnumResourceTypesW
RtlUnwind
VirtualProtect
FindFirstFileW
SetUnhandledExceptionFilter
ExitProcess
HeapValidate
HeapFree

gdi32

GetStockObject

oleacc

AccessibleChildren
CreateStdAccessibleProxyW

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ