c225500420d543e4bacd58e2c0a6df69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c225500420d543e4bacd58e2c0a6df69_JaffaCakes118
Size

3.1MB
MD5

c225500420d543e4bacd58e2c0a6df69
SHA1

4a091d5002d2106af92979c35e7327b4d2e4185f
SHA256

dac9a64846754f192f1d162595f4462e4f2ecc3a21b677c22a2a2a76e8cf912a
SHA512

3eadcffa4203c8337964d772b69f8b80dff172536a614c0191a7f81792899716ee4937504a7072db8edd182d21a9fc6c48f4f59bd99e3e070d2d01da688b193c
SSDEEP

98304:y4zUfCRyEmyjowURtV4QCQRT1TiM8HoT+o/GM:jU4+wUerQXqoCo/GM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c225500420d543e4bacd58e2c0a6df69_JaffaCakes118

Files

c225500420d543e4bacd58e2c0a6df69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE