74cd09b828bbbc139c07944c82544613_JaffaCakes118 | Triage

Sharing

General

Target

74cd09b828bbbc139c07944c82544613_JaffaCakes118
Size

3.3MB
MD5

74cd09b828bbbc139c07944c82544613
SHA1

85eecbe53d77194a1c860bfcd9bdd941e3819b39
SHA256

35fae6d7e248e63dd0beeed7ce60a167ab2001b678fa9c54561582249a16d19e
SHA512

0e6a3818d4495a3456cdb19f7800cb31a32f293b569b7ee62108ab6c33cb388a086aabb60a2c4be9c1adb28743cccdb04220cb1b29d8df9209112060a917de73
SSDEEP

98304:oso38a9mcgz0jUGc+wFP3R4POaqKrb/lOUAJWZ6f:ospsmcgz63PwF/R9Kf/8UA4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74cd09b828bbbc139c07944c82544613_JaffaCakes118

Files

74cd09b828bbbc139c07944c82544613_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 14.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE