45204a184b0755e0497576252dac1575_JaffaCakes118 | Triage

Sharing

General

Target

45204a184b0755e0497576252dac1575_JaffaCakes118
Size

76KB
MD5

45204a184b0755e0497576252dac1575
SHA1

3609d6f2866f35de308c63f85557d5d3752e62e9
SHA256

b56ae0686af4ec8d7b1e6c0e062c196bee226b66251dd0fde5e366c178edb9f4
SHA512

2abf03ab0903db66d905a0ef8b5b55f4af6035bfa2e8098b1599aa99bab3097edaa5d6852446b57937cdd69e83bf13fcf64bd2b5eb5e46ac897c953448c093ea
SSDEEP

1536:Czx48NHMEYmmDkT6mtgPfUOnInBV9WMIML4zpjVrs2ryrd1vUQuq6:WRMEzv6mCPVIBV9WMIY4zHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45204a184b0755e0497576252dac1575_JaffaCakes118

Files

45204a184b0755e0497576252dac1575_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73e53802cc4c383a4a9d8e5708fc8810

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoW
RtlZeroMemory
CreateJobObjectW
GetFileSize
GetProcessHeaps
CopyFileExA
GetTempPathW
CheckRemoteDebuggerPresent
CallNamedPipeW
WriteConsoleOutputCharacterA
VerLanguageNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE