45db6471d211d1ac93055496cb78dfb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45db6471d211d1ac93055496cb78dfb6_JaffaCakes118
Size

176KB
MD5

45db6471d211d1ac93055496cb78dfb6
SHA1

ee12750c76c6826fe58c1307bcb8af313320b9b6
SHA256

154330bc2b00fe454acce3b19f8e472671294d2dac034d343a446fc99198b892
SHA512

2172ac8d885863c7048788e109f06fd4cf4d7d6f8e739da1bc896483ef1ec315210cfef5fd814e5d449a85d96eefdd0a044b05fc6c2bb7067f2b52b4408b8189
SSDEEP

3072:huusxz/vihWmffoURAHtwThh3qpofARKypPR+G+7yWruikRcI4dEzlFtghGPGb4T:Iusxz/vih/QntwTz3qqRXciWD4kvt7GE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45db6471d211d1ac93055496cb78dfb6_JaffaCakes118

Files

45db6471d211d1ac93055496cb78dfb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 593B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ