8a00adcbb26c42f8738c6671e09c9d2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a00adcbb26c42f8738c6671e09c9d2e_JaffaCakes118
Size

3.7MB
MD5

8a00adcbb26c42f8738c6671e09c9d2e
SHA1

fdf5dff6a4353d0da7770bdbe746730f10778aad
SHA256

886103bf201c8ec0cb1d50c0c047979f8c3ad151be241f7d9e8edbea8b5894ff
SHA512

ea0373a91b7c8ef81b6a94a893a399ebdce6662be36a506d61e25793b19f780ac579ca84f0fc812a8f2ea0cc2d76077b06a168848b3dbc6a2fcb5d78adaa7694
SSDEEP

98304:Sstehvz0r5kLfWZH5TbZBTgqvlRZ5Z5ctWtUSqY8ygp5mbuZ9:o702+ZZTpvl1bRqUe5mq7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a00adcbb26c42f8738c6671e09c9d2e_JaffaCakes118

Files

8a00adcbb26c42f8738c6671e09c9d2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 28.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE