a4412d93b6c8ee307823e84924639123_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4412d93b6c8ee307823e84924639123_JaffaCakes118
Size

3.9MB
MD5

a4412d93b6c8ee307823e84924639123
SHA1

66219097e359e0f588e81b56450a26a066713c44
SHA256

c6dd6865dc1ee9caad3b61f0b82a85a5b697bf13a35436d293a8b190b674378a
SHA512

56ab5a0c5143d0e3e532f3a54265c6e523b64158d2673662741a5c50099550c86571a90dcd5d9d478aa806e1e6de5ff96cc81ba30e82ef9fdb1d7cd20b83a303
SSDEEP

98304:Qpmzio3PYWjVpTrLQAACt/cz/CXrGkzTMa2tn7LzlGLNRer:gmXAWjVFHAhmykvMrtn7lh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4412d93b6c8ee307823e84924639123_JaffaCakes118

Files

a4412d93b6c8ee307823e84924639123_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 19.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE