45108a00efde439a4a19ddfd4cd49b3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45108a00efde439a4a19ddfd4cd49b3a_JaffaCakes118
Size

3.7MB
MD5

45108a00efde439a4a19ddfd4cd49b3a
SHA1

a980699b44d34df0cc19c5d62f96610e0d282586
SHA256

e31d123e8e70778912b6ec3a7db122be29b04e56ff93fff40f30eb760de7c100
SHA512

ab313da4c2c7f762ec47611b4ac93f6d1b3fc28cc748b31c50588ce319c97a51a4ad6d284bf1c141b2558e2f269feaed1612ebe1154ceefc4651a91d4134f3bf
SSDEEP

49152:jiP5Aol95pOgjTyV+qHA+8c56FLiJQiP5Aol95pOg2TyVL7mkqsP/HhViKDr:jiP5TDOzVlZgi+iP5TDOYV/Ws3B8KDr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45108a00efde439a4a19ddfd4cd49b3a_JaffaCakes118

Files

45108a00efde439a4a19ddfd4cd49b3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 746KB - Virtual size: 746KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ