dc124fa3880343060bacc5ca55a2b3d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc124fa3880343060bacc5ca55a2b3d4_JaffaCakes118
Size

138KB
MD5

dc124fa3880343060bacc5ca55a2b3d4
SHA1

afae2d87eb4e9ddde7848ae2535016875c2d4b0b
SHA256

3f188993d027f88a44679d89c204ede9e36ea1e79bf9f0fe17fe252c7ad07424
SHA512

5764d4e98c030573e04412d0e6bf74efea1c6ee241bc8b65bfe44e986ea026de85ad4cc48f1609e5dc203aae8df8057b09d56312e668de9e444a742205d8f858
SSDEEP

3072:eKvfhQOS9bU5Qm5tjsYvpSTowDEwLBrA6ZVfmdK:VBiQ7tj9E6wLBs6ZV1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc124fa3880343060bacc5ca55a2b3d4_JaffaCakes118

Files

dc124fa3880343060bacc5ca55a2b3d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE