45e497502826121070ac7fe283a5617e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45e497502826121070ac7fe283a5617e_JaffaCakes118
Size

100KB
MD5

45e497502826121070ac7fe283a5617e
SHA1

2c1a7626dfc8909e6a8db77234ed6eff3ca35d21
SHA256

a1e628d8848ce151bc6e59a7796eab54b18298de12e6d2aa99e76003cea0c3a6
SHA512

48adba21e4d773ca7677649a8a5085aaa7227ead38620a0cf308e9f37ce07d637faf40a00e6e422c6623c1f701d9c7806ea137a51e26c5d6bd658c15d7bbaaab
SSDEEP

1536:A3Rvc2Op3LXxChkwGCuKB1HQ7mHpsD11OI6hKJ1pgq6XDHxUOx5Rcmode:uRk2IDl0jQ7mHpsD11bJ1u5LxUMz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45e497502826121070ac7fe283a5617e_JaffaCakes118

Files

45e497502826121070ac7fe283a5617e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.png
Size: 32KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.exe
Size: 125KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 122KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ