45163327bd02ebb6162c6474c3a8b32d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45163327bd02ebb6162c6474c3a8b32d_JaffaCakes118
Size

63KB
MD5

45163327bd02ebb6162c6474c3a8b32d
SHA1

751c0af1a169b2fcd6bc8ad708d95956733a7849
SHA256

4e95842c697a137db685f8a5e90be5c385ae3be205ba5dd16c523af0cf35abea
SHA512

bbae03f60d888aa75e7597898b9d8dc5ab5ac69d8fc8eb78c0e7fc66e13e0c2729d8b97099be5d14346eb7db19ea66bf83683a0f1373e013db5d061df110e1e0
SSDEEP

1536:F6wwwwEh58AXzPT9znHsHQevhs0Mh1TPekcsc/vGo5UJ:T7lMHQh0MhtWND/eZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45163327bd02ebb6162c6474c3a8b32d_JaffaCakes118

Files

45163327bd02ebb6162c6474c3a8b32d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30be2b773c1fec4876672391f7506c69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy
LoadLibraryW
CopyFileA
EraseTape
LocalCompact
GetDateFormatA
LZInit
ConvertFiberToThread
GetLinguistLangSize
WriteConsoleOutputCharacterW
GetThreadContext
FreeConsole

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE