452be9bd49c5818b8044a094f62cf853_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

452be9bd49c5818b8044a094f62cf853_JaffaCakes118
Size

33KB
MD5

452be9bd49c5818b8044a094f62cf853
SHA1

14f56c1f5c49564274a36e145fc83beb09f7735d
SHA256

8eecf840fbe71e9368072b7495c323e11ef46587cb4204c8df4ef3426d7f381e
SHA512

c349668cde58c4ed7d7e4c1dacc87bdfa3e0f9364eebd060ad144f2f78b4ae9eff6ab7f93d54be59a5cf8fb24728d08b8873d9247fce902f5698affce6f5d159
SSDEEP

768:sUI1N+Z5Jd1rOd5pLJCxtKnkrw+S59+3/4r1yCgOj7oQCB:s4ZHydrLJCunkMV59+P4r1yCVgB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
452be9bd49c5818b8044a094f62cf853_JaffaCakes118

Files

452be9bd49c5818b8044a094f62cf853_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee2bf920917f70362b3e8f39d6bc150a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
VirtualFree
GetProcAddress

user32

BeginPaint
GetDesktopWindow

gdi32

GetPixel

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ