45ce6acf352002108d76a06e31a6a49b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45ce6acf352002108d76a06e31a6a49b_JaffaCakes118
Size

57KB
MD5

45ce6acf352002108d76a06e31a6a49b
SHA1

69332ca0924fd907febd87570ad1d1cfa5e94cea
SHA256

0f2ad4224da6c519dd8e12c9710abd6aedf3fd8af68e95babf0fb450b19fb568
SHA512

ab81baef459f3f3978236fa4238c17c03b58e3141d874e24a51d577b9d95b7a9c920e4a1049da432edae48c434dd725d73bade1eb17af11b40119e46f7e8b216
SSDEEP

768:q1kLAfhnPwKS93PwKSdvOkExZbfigWBEpIDrVql4jfshhGPXIXe40rWeHjuFrcsH:w9fhTvzEDipJVql4ghQ9HqFrcs9kc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45ce6acf352002108d76a06e31a6a49b_JaffaCakes118

Files

45ce6acf352002108d76a06e31a6a49b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1683e9126e4ab15d19b030e09fb7c4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WriteFile
DeleteFileW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ