18b022a5e505eb6b25ce64cbd98c3087_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18b022a5e505eb6b25ce64cbd98c3087_JaffaCakes118
Size

1.5MB
MD5

18b022a5e505eb6b25ce64cbd98c3087
SHA1

32b33b7319a289efb103595777122b4b5b7ade59
SHA256

ee76a69ea9a8f2770d81f875f2e8cdfc2b25725098931d754ceebf89b0727daa
SHA512

fc2ea8ead493c40fbabe94523a3c70523f8d219842c8d6bf19a1ba4cc2e92629ef578b62947357bd5928554cc48b083812691ee258eca2396230a226a6205bc1
SSDEEP

49152:qmB1Gro59TRoYTczzbLBuomX87ue09Nn7PXBMcf/mvQhy3:qmB1wo3toucjLzy5HMQmvMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b022a5e505eb6b25ce64cbd98c3087_JaffaCakes118

Files

18b022a5e505eb6b25ce64cbd98c3087_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 11.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE