452b7ca15fddbb956751d67a084730ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

452b7ca15fddbb956751d67a084730ca_JaffaCakes118
Size

3.5MB
MD5

452b7ca15fddbb956751d67a084730ca
SHA1

3b0a2bea1795dc0fad4fb35e98003d5c9aa75444
SHA256

906ba2fa7977b6af65580a7b7d15bd2017156bdf1c7965afdd614130d1d377e5
SHA512

f7411cc7cdb300a9078ab97c5e9c22190ace67af82cfcb9650b490ecef822f00f78e527da59d0fc8ad0f7396d9db6a2ce4abc42265068883b6f60872587f28b0
SSDEEP

49152:9viNhSTZaqdwk0c09HGiaCF0J+ZsAvz6CpAW8P3JeYXrSng1fpfn:9HYqdwkL6HH1yJcmn5eYXrVF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
452b7ca15fddbb956751d67a084730ca_JaffaCakes118

Files

452b7ca15fddbb956751d67a084730ca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

43824502ec1698caa9bf2963c6ad815f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32 msvfw32

LockFile pC8

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ