45aa22336be47399a8d8e1f13d7a0f61_JaffaCakes118 | Triage

Sharing

General

Target

45aa22336be47399a8d8e1f13d7a0f61_JaffaCakes118
Size

1.2MB
MD5

45aa22336be47399a8d8e1f13d7a0f61
SHA1

40fe44d27e91386f8c1810a2d51a44eab4f002f3
SHA256

8be140f131fe77758b9d060ce64f0eb3c87e82de9650e047de781f14f982974b
SHA512

c66bee5a5c1bc7ce5c0b51e7bef360c8343e7d25ff346d32d4d487d836bafa4e54bb474968229a054c92102f2731c37041c7ccba804ec4bfcafc4319d64c946b
SSDEEP

24576:XxW9lWGbE9LnlvlpRDYX+aOcygjfUI4hB9SxBQ+eg9eWF6YwEkcCAo:BGWCEBltp+OJcDjsTT+ggzEzcI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45aa22336be47399a8d8e1f13d7a0f61_JaffaCakes118

Files

45aa22336be47399a8d8e1f13d7a0f61_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Sections

.text
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xxx
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE