b447521782e5f9cbe60bb46b719ea619_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b447521782e5f9cbe60bb46b719ea619_JaffaCakes118
Size

173KB
MD5

b447521782e5f9cbe60bb46b719ea619
SHA1

692489c4189a8874ec4b394569ac8ab5c3298b4d
SHA256

1fea00f8e87175dec9ee2abfcab8c444ea5222a0b81ebc75a4108995ab3c00b7
SHA512

b5e7d123786eb5b6b2817ab3ebcc65e37698d85748ab92060bc0b8942163bc865a25cc84457de8ade429c3ecb27edb4619b9f21c78c3cf92b4a252237088ada0
SSDEEP

3072:gwhaRSGUxiYWoBtlDVS9vWJmhI0dsDqLg7DpnY/K0kDwAMHpWYJG7vLbre1PmcXb:gwkRm8oBtlpS9vVI0dVYY/z1JzG7KpmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b447521782e5f9cbe60bb46b719ea619_JaffaCakes118

Files

b447521782e5f9cbe60bb46b719ea619_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE