fbc2125f8196f789f229029ad6610bef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbc2125f8196f789f229029ad6610bef_JaffaCakes118
Size

11.3MB
MD5

fbc2125f8196f789f229029ad6610bef
SHA1

6875bc4e7afda49b51e02cb251497af1f8e05f7b
SHA256

690ec5055da89d62664013faa963c8a988874d62121a49b10a7da6df70a25d90
SHA512

d6352dc706b0433dc892049aa6a95f05d5dc3a8a04d65cbb650921583a6b851c1cbbe51b7e9a8f5b5f3adfcff24ff0cd0b5a857b8307397e4983ff82d36146d5
SSDEEP

196608:R3HpX3CLIP9R03JX/LHTeoU4NjqCMvcdexWgETKIpLavAYbo0Vhcr3eoHDscVuuE:tlCE303J/ev4NjqigxWgMhczcrFHDscO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SplitIt_3.8.593_gb/SplitIt.exe

Files

fbc2125f8196f789f229029ad6610bef_JaffaCakes118
.rar
SplitIt_3.8.593_gb/Q&A.txt
SplitIt_3.8.593_gb/Readme.txt
SplitIt_3.8.593_gb/SplitIt.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 388KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SplitIt_3.8.593_gb/SplitIt.ver
SplitIt_3.8.593_gb/Tools_3.8.593.pkz
SplitIt_3.8.593_gb/Update.txt