45cc81a35f9e756f6b848d64f6054200_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45cc81a35f9e756f6b848d64f6054200_JaffaCakes118
Size

96KB
MD5

45cc81a35f9e756f6b848d64f6054200
SHA1

e8bba3169049f285094a5b408587258ade3e0e65
SHA256

1dd07ee762bb1bd1a2fa12e0311f69383737ef582eae01f6a0789fd1c678420b
SHA512

e1554a5570fad31618ef8f585ad9fcf315165048f92516563a20ab9a318a252edf0c60006bdd65f3fe063ddd93f1c4d16962e9514dc351b0b522ad585605241d
SSDEEP

1536:L54CQM+GL8f+4wBKHXA7s5Ma8UG/eLyobeNU3YInX:L5Lh+GY+hBawla6/cf6NU3YIn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45cc81a35f9e756f6b848d64f6054200_JaffaCakes118

Files

45cc81a35f9e756f6b848d64f6054200_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b2474ffd473672dc2fabca792a15fb0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
lstrlenA
GlobalAlloc
lstrlenW
GlobalFree
VirtualProtect

user32

IsWindow

advapi32

UnregisterTraceGuids
TraceMessage

msvcr71

__dllonexit
_except_handler3
memset
_vsnwprintf
_stricmp
memcpy
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
_onexit

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ