45a8bd045e939ad67e16d3574bc2b33e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45a8bd045e939ad67e16d3574bc2b33e_JaffaCakes118
Size

147KB
MD5

45a8bd045e939ad67e16d3574bc2b33e
SHA1

2103ac6a9d61f0298f3ccef578cab7481766810b
SHA256

5d7ffc9bf1196f7c3527ff56c2329e1b499daa84f952232c2e1944caada45124
SHA512

71dca61c6608b3b9d3d06e55659f1268c1bc0243eb8c560d2ff0cb6e8b9c3e2daf6a9577301e95dca8c8110cc0611fd6c6a047dac3ab6d1445cc5371604213c9
SSDEEP

3072:K6JhHOVqE8dRelURl+ES2UFl/8e2ZhOW17bI3mHMbQe:7JMqE2BlXK7/zuph4Ci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45a8bd045e939ad67e16d3574bc2b33e_JaffaCakes118

Files

45a8bd045e939ad67e16d3574bc2b33e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2cce3b4f0176e9b0a3d60adc50807ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
CreateMutexA
GetComputerNameA
SetEvent
GetCurrentThreadId
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
SetFilePointer
GetCurrentProcess
GetCurrentThread
ExitProcess
VirtualAlloc
GetCurrentDirectoryA
ReadFile
LocalAlloc
GetVersionExA
GetFileSize
VirtualProtect
CreateEventA

advapi32

GetUserNameA

user32

GetForegroundWindow

msvcrt

memset
wcslen
wcsncpy
memcpy

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ