45c35106eb1f633e8c5c490d10fbdb2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45c35106eb1f633e8c5c490d10fbdb2e_JaffaCakes118
Size

525KB
MD5

45c35106eb1f633e8c5c490d10fbdb2e
SHA1

102fd4c76613228b915a978032e3005a741f571c
SHA256

3beed7d20b0c1b3eccc07309caf16e65fde1db4dbab6cc556e89d94e0c1c563b
SHA512

6fedd3ef3c401b440b6df73a67386719d346c75386627746640d5ec6289c7705c857be176d9cbfcd73f92f1b272e07cc186ca41526a9a6d2801de47e3d146e97
SSDEEP

12288:7aTmNyvVcp6Hx9Ik9DoX3LldCbZBEUNovFH0B9/MKZ:Mcp6HxoXO1BfB6KZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45c35106eb1f633e8c5c490d10fbdb2e_JaffaCakes118

Files

45c35106eb1f633e8c5c490d10fbdb2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\DistributedAutoLink\Temp\CompileOutputDir\RsBackup.pdb

Sections

.text
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE