a6959a11aad51da69deae896e780eebc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6959a11aad51da69deae896e780eebc_JaffaCakes118
Size

1.3MB
MD5

a6959a11aad51da69deae896e780eebc
SHA1

904ea9b4a433430b9a4a1f45f7fe87c46ad09e1f
SHA256

b89480755a8a29bea623f389d8b2defc0cbe69febc46dff6e367eca16335bf2d
SHA512

5a12e092ca449004effbd76988c50a8e3a99c60317eefab5d7d2399d1ad0afa1502bf67ed78bd58bddeba96dab1a66dd0d38900ca183e3afd9e4db16031de878
SSDEEP

24576:leI2BsgxnqEm7ENwxOp9gmxcJxtwH0/vKLZ5FUJ8aH8fSJ0k3v:g92gxe7rOpSaqx2TZ5UxH8fHKv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6959a11aad51da69deae896e780eebc_JaffaCakes118

Files

a6959a11aad51da69deae896e780eebc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE