45799df1d115c95b5724a21d4382c037_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45799df1d115c95b5724a21d4382c037_JaffaCakes118
Size

251KB
MD5

45799df1d115c95b5724a21d4382c037
SHA1

d697ef9e233468ff33408cee0950bebccbaa7fac
SHA256

bdc535f6d88fe5a5fc406a3e1e03c02b6ff0d66dade60fd7f2c5d0dc833d2570
SHA512

4be9cdf426eea33cb6811e5db3962d410e3e4d281bb42157cd97b34440a6770e631d0098275bdb47a3e37cbc13210856bff7865f5720629924dc67f118ffe063
SSDEEP

6144:SGL7bch2YKw7Tf0PimvGTSZMZuN6JIgwQI5Y+1ea2REOh:rbG2Vwvf0P3caMR6Q9+czDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45799df1d115c95b5724a21d4382c037_JaffaCakes118

Files

45799df1d115c95b5724a21d4382c037_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5eeb6c0c9f779bdab442456c74846cfd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
RtlUnwind
CreateSemaphoreW
OpenFileMappingA
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayCopyData
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureFile

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 121KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ