45fc807acba7a509aaa4b48d51c2b08f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45fc807acba7a509aaa4b48d51c2b08f_JaffaCakes118
Size

94KB
MD5

45fc807acba7a509aaa4b48d51c2b08f
SHA1

21fde4d21f5bdc2c580b47d596e52552b72a8c4f
SHA256

6ca708ebe99e558e7c75f9d8f7a93bf965220ab54cd942b820024040b5e8b283
SHA512

328acdcd4448f72ea1373c8823256040a14fea65a5c0765ecd1fa3add0b63b29c9ad7f81eaf72dbd07d28a0d6351e8ec2951fb98c916c90eda5122990ba2b935
SSDEEP

1536:bzgZsazltHnpEdmnTLcM0zHulkAQE6T61Yj1agNd0Pc0eEN:vgZsaBtHpEdmnTL50j5AQ2+fqcRE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45fc807acba7a509aaa4b48d51c2b08f_JaffaCakes118

Files

45fc807acba7a509aaa4b48d51c2b08f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2205f073b634c1497f1fc3e78c7e99fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

Beep
HeapAlloc
GetProcessHeap
HeapFree
GetTempPathW

msvcrt

memcpy
memcmp
memset

Exports

Exports

urpkbe

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 466B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ