163b4741a645bf89b42359268e4d4458_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

163b4741a645bf89b42359268e4d4458_JaffaCakes118
Size

3.6MB
MD5

163b4741a645bf89b42359268e4d4458
SHA1

87df9a695486460b6105cf1f5d21da452ffa85a6
SHA256

6eae7e5ddcbff95632c68da691dcd89a5ff7e736ae42d744b898936bd3a34ee4
SHA512

b977ea15bbdea4293e523ec2100a0f487eec041820808a7899baada142c72e22ba3aaec7d4a6c3a8dbf8b091aec2e42f05991faaf966a436c9ce543981babcab
SSDEEP

49152:SMUBnBC83AXqoBtBjt11iGBYdyzHXs+s8KuqGaX0ToIBAUZLY7FYRdw:XWT3AXpTBpTJBYda/JBAUZLCz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
163b4741a645bf89b42359268e4d4458_JaffaCakes118

Files

163b4741a645bf89b42359268e4d4458_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8d3644d6015ba8d1cd378070c8e1ddc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32 rasapi32

FillRgn Pc8

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vmp9
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vmp9
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vmp9
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ