b8155ff67800eb8142fb4d4a866ecd9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8155ff67800eb8142fb4d4a866ecd9d_JaffaCakes118
Size

30KB
MD5

b8155ff67800eb8142fb4d4a866ecd9d
SHA1

76df2c8cb655b633d554c3dce1e41c1e8cc39280
SHA256

401415a87cc5b426226299c5167b22c91f64b7c801140f7c1ed4cdccb28c5bca
SHA512

ffc8ba6cdc4bd794fb98acd91a9200df7308cb04070f5d5dd19ae882b80847647b967c4c18f4a085a33d77fb31cb9918d51feb24fc429d07d6fbc3fee220f510
SSDEEP

768:Nn+/pCAvKZFuUcBj1QNywdqbbzt8uCLZeu0WrdqPSGsQMBKV:N+/882FkkqbbZRCLRprdqPSvQz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AutoCompress.exe

Files

b8155ff67800eb8142fb4d4a866ecd9d_JaffaCakes118
.zip
AutoCompress.exe
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

exever
Size: - Virtual size: 565B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t
Size: 28KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ReadMe_ENG.txt