45fd415ca12b83db433da52994cd57fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45fd415ca12b83db433da52994cd57fb_JaffaCakes118
Size

294KB
MD5

45fd415ca12b83db433da52994cd57fb
SHA1

1856668ceafdb03dc9597737e7939829ba34dfa2
SHA256

885bfbf26a09b3cd5621eda3defe903b7da3553f219c28373cfc0ed20fc1f11a
SHA512

f82021cd1622e1e25ecd026dbe50156d34817209f03e003d778353aa5b7cba6b303ca58dfc3c336d272fa07589b2f9ec714464732a6644b07157db8bd21844eb
SSDEEP

6144:pGVNJEhE9BSb4Vo8e1suqifHfuKdJ6BEeEq9d6j4oOOiXDrU:YVNJE69sbeoF102dIiep9d6jjOY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45fd415ca12b83db433da52994cd57fb_JaffaCakes118

Files

45fd415ca12b83db433da52994cd57fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73f561e52119663211474af2670f9c28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetUserDefaultLCID
DeviceIoControl
FreeLibrary
GlobalAlloc
IsValidCodePage

user32

SendMessageA

Sections

DlwjLzKJ
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

uRgDmAMQ
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zyFTdFkZ
Size: 261KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE