4a15be9365b87dd466374358297642a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a15be9365b87dd466374358297642a3_JaffaCakes118
Size

138KB
MD5

4a15be9365b87dd466374358297642a3
SHA1

250091137ce234569de7714f2249fca84e4cfcb6
SHA256

bde55fd46328c5ade61a453976907f7f0ec3199cc5ec07b16041fbeeb759df17
SHA512

22a17dd7e87592f1d1605286a26cbc2b1327d14c7749a56601375b64e7764414f50611d3c16b8b01be839be66d862b5cdb579be506d755a608bd32813615b498
SSDEEP

3072:tKvjzQOS9bU5Qm5tjsYvpSTowDEwLBrA6ZVfmxK:aBiQ7tj9E6wLBs6ZVr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a15be9365b87dd466374358297642a3_JaffaCakes118

Files

4a15be9365b87dd466374358297642a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE