61854efe5661b9ecfb8b7ed8e30e4492_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61854efe5661b9ecfb8b7ed8e30e4492_JaffaCakes118
Size

13KB
MD5

61854efe5661b9ecfb8b7ed8e30e4492
SHA1

537c109ba9eba7f9fbdc147ed01d3c038d35758c
SHA256

d1fcec51fcfe834b136fbdf953530bf0913ce1e2f70acd84f51608480048b595
SHA512

50259d273836606019fc6985d5866cd0fd9d991d4a3b1658053b8d0146d78b1212e0b37c2510776ab0747036820d6042c623997efc863a06f9f7db4ce4e615ce
SSDEEP

192:KX05gXPMVUrpa3Z7yG75hk9SXqmGbXtIgg8ILTrlyYysK+laE8t:KX0GXUVcUZ7yG734N3xRVS3lyYylTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61854efe5661b9ecfb8b7ed8e30e4492_JaffaCakes118

Files

61854efe5661b9ecfb8b7ed8e30e4492_JaffaCakes118
.exe windows:4 windows x86 arch:x86

148bf55ceb3e5471ef5f9ffc2bb75e2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.XComp0
Size: 6KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XComp
Size: 888B - Virtual size: 888B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE