b8f4c37bbbe4eb5403986f7bc7985f7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8f4c37bbbe4eb5403986f7bc7985f7a_JaffaCakes118
Size

389KB
MD5

b8f4c37bbbe4eb5403986f7bc7985f7a
SHA1

64318a2eb51cd47965e20af631cebeb3cb07e2d4
SHA256

969ff8f1fdceb08b37cecf949c0eb6dae795ee9a442cc53c218c4a6b987b266d
SHA512

b1b0b10803962e596e4abf82a511f369c762ddad32233b577ca098ca28ead3514b8950f0987aa95cac8dd37e96056a0578edfcf9b4889f228a0f7d6fe6464416
SSDEEP

6144:xFIv445WLdWgItW4TesakodcQdMVlaM0RFSqHDeqJBhQErQiSOU:xzpdWgn43akoOVMMcJ7zQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8f4c37bbbe4eb5403986f7bc7985f7a_JaffaCakes118

Files

b8f4c37bbbe4eb5403986f7bc7985f7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 331KB - Virtual size: 876KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE