b9494cfa2aa8259f55ef31f645318e99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9494cfa2aa8259f55ef31f645318e99_JaffaCakes118
Size

3.6MB
MD5

b9494cfa2aa8259f55ef31f645318e99
SHA1

01fda72cd322c1157a9fd68e3b73779fa139dca2
SHA256

2452196fe8f7e3019c26f4dbc00e17b84b31f6fa2c782805adcf53a02f5c3386
SHA512

d8a498dadf754e17467ec373ffd5c7b763b59b09160be9d25ad1c770bdae4264ba7aa03ce17890ef35b4cd2338572364772c97520ef1bf0e2512248684f40ef8
SSDEEP

98304:3TR7rbA0mi+Rj4qDlmEyz4aPXSBsTRW78kD:jRs7p4EyZS+t0ND

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9494cfa2aa8259f55ef31f645318e99_JaffaCakes118

Files

b9494cfa2aa8259f55ef31f645318e99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.sadsad0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sadsads
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE