45209bf05aa4ca258884a82daff02218_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45209bf05aa4ca258884a82daff02218_JaffaCakes118
Size

114KB
MD5

45209bf05aa4ca258884a82daff02218
SHA1

80afc81dfeadfc53866712fcaf07513b70dc135e
SHA256

017a6e0409fccd9b8455fe4204a90c75ad8ff5d01edc8c036b82bd4ecf60026c
SHA512

0ae242f2d3e41f61e9d23509bdc7d980848d288bfe4b37409f397c55093c4b93a9eb4c00b02aac886fd75fc83e48e7abff54435058bdc8ad6ea31c5bc710772f
SSDEEP

1536:Zo/cSpkEYtwBHKm56Gk5KhAcHcmBG2RHWR3xiAqrhXFNw69B/HIl9w:ZHDk6GkKAWB23xiAqDNbBAf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45209bf05aa4ca258884a82daff02218_JaffaCakes118

Files

45209bf05aa4ca258884a82daff02218_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc65fac5efa5e17873c6dfcb5a580be5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
DeleteFileW
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE