ea5aef37820366c5dc63dc9537bb7292_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5aef37820366c5dc63dc9537bb7292_JaffaCakes118
Size

4.0MB
MD5

ea5aef37820366c5dc63dc9537bb7292
SHA1

73488fbe020ecac7c6f5c3edba8d023092ea4a32
SHA256

3119dd5deb8b90d361cdbf5b02c1de1fa8672259fff5d8e7b754cb408bfecfd0
SHA512

41e912229abab7285b568a00e5cfacc10130adc5db044259e4fbe05081c5e215fb56d5752fe18ad493cd53ec0f18520d55b267bdeb8efc249fc116b08adc150a
SSDEEP

98304:5KGal75x/nscyFkWr8iJiPuZeJM3e7UsE/Kf0NI7EZYcTRJ0pyt:cblvn1cXZeJMAPE/Kf0NI7iYcTROpe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea5aef37820366c5dc63dc9537bb7292_JaffaCakes118

Files

ea5aef37820366c5dc63dc9537bb7292_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE