f1cb0cf85770a4092516093257936222_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1cb0cf85770a4092516093257936222_JaffaCakes118
Size

268KB
MD5

f1cb0cf85770a4092516093257936222
SHA1

4cf6c19bffcdcf144dcbff57ec4ca12d5f8125eb
SHA256

83b0b03bb456c93f3e95337e9f8bbaa9968e4b636b7e52475ac3d829c282c702
SHA512

c1c02bd4d88bc9180170a8efa1f9c2a6691fdf199de5fcdd3ebf08b893b95f62dc9a2b449c61a30f9052b211865c44945bc1367c64cef912bd268dcc65b45768
SSDEEP

6144:8QyLwNmqWUg2nX0HFMY6KIdhzLXqPikxArlrMw+CnXnV:8Vw8tUg2kHFv69oi/lrMIV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1cb0cf85770a4092516093257936222_JaffaCakes118

Files

f1cb0cf85770a4092516093257936222_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 267KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE