45f4131d878a2a1267feb9a3ca640084_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45f4131d878a2a1267feb9a3ca640084_JaffaCakes118
Size

57KB
MD5

45f4131d878a2a1267feb9a3ca640084
SHA1

2d0aebb6cd2868173190dfa046b20d106a74c99c
SHA256

235759d86ecf8c94309cba7a11551eb948ce88054e13d188834b72df99dfc921
SHA512

ba21d92948a691f5737042c2dd0802a43f1a976b9cad23e734b09084bc05d854a1e9665e0467cfaa58c545d079204a46293fb1b7154774693cdc51b0aa24348f
SSDEEP

1536:raLphh4px/GaOsXDp1CbVZn+K5mayAMIf:rIphho/1OOTNSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45f4131d878a2a1267feb9a3ca640084_JaffaCakes118

Files

45f4131d878a2a1267feb9a3ca640084_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 47KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE