45d9869e8408d0991ecd0713205d54e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45d9869e8408d0991ecd0713205d54e0_JaffaCakes118
Size

112KB
MD5

45d9869e8408d0991ecd0713205d54e0
SHA1

fb1ac1b6127c4a8bae5a894bfa6e78e7e571e86c
SHA256

c94f50ca6c8408737e93520f98083d82c97b187815618df4424b860f1c4fd233
SHA512

29eda4b8ab5a9c35dcfff3c1909bce8353837df1771216641109e8baacb9ddff026338df7b70dc8e50dba7525f3f468bf79468cec84e393bee53912b9a8ed950
SSDEEP

3072:XwW4aFt7AzG3V61sdP1pJayb38GSvXdQgAA4U2P4MJCq0Au3pHXdS05m:gW4aFt793VDdP1pJayb38GSvXCgAHU2s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45d9869e8408d0991ecd0713205d54e0_JaffaCakes118

Files

45d9869e8408d0991ecd0713205d54e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28b40b78689be7e83ccca2ff02354d4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ