45af8fbb661cea033a08074b157a426b_JaffaCakes118 | Triage

Sharing

General

Target

45af8fbb661cea033a08074b157a426b_JaffaCakes118
Size

9KB
MD5

45af8fbb661cea033a08074b157a426b
SHA1

be21b9c5aa966ed9d6160e73ea6163df7dfc8c11
SHA256

1a3d2ff46f42ea66c93f616fa752e34a1990f2f6bd795b8575eae946027e03d5
SHA512

f609531735d33ae146dcc677eaa7f3434bace1b448edcd1f18662eb822f541eaee99a94e45c5364ade12edcc996efd157b3381cc3ef05c5924b1753088e3035b
SSDEEP

192:YOXSY7SXHBjtFPhrTWNv/OEsVkfvLyk8ps602MUVL3SnXna1S48Z+HAO:1XSgKxpnEv/OE3LyTps/aVL3+natUO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45af8fbb661cea033a08074b157a426b_JaffaCakes118

Files

45af8fbb661cea033a08074b157a426b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4afcd3281e13fec5d5a0ab4d92335928

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

icmp

IcmpCloseHandle
IcmpSendEcho
do_echo_req
IcmpCreateFile

lz32

LZClose
CopyLZFile
LZCloseFile
LZDone
LZInit
LZRead

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE