5b5e90336a4e51c6d072ce1d86182413_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b5e90336a4e51c6d072ce1d86182413_JaffaCakes118
Size

104KB
MD5

5b5e90336a4e51c6d072ce1d86182413
SHA1

d955d55b9d111de0698b7244abdd897a99d47461
SHA256

e0c1382d79e6e9302df4d3039fb5f50c3a927322ed90da0f50b718b566b6abbb
SHA512

0021c3dbd3e24cf42c143f89e8371ca05d3c939384dec9028fb36846f2a08f6ff644f1a89f355c3f4fc766198e0e397c7fff4c42fe55f7a918cb6ec6ecbeb0ba
SSDEEP

3072:/8K9LGFnFHtQid27uKfrJBVv7cufkeuqFWc:EK9onV8usJjYuz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b5e90336a4e51c6d072ce1d86182413_JaffaCakes118

Files

5b5e90336a4e51c6d072ce1d86182413_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 104KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE