f32d05faaa0076f74de62a4094d78141_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f32d05faaa0076f74de62a4094d78141_JaffaCakes118
Size

645KB
MD5

f32d05faaa0076f74de62a4094d78141
SHA1

58c6f5e002bf9098343a23d7cda36f3378646b5d
SHA256

c6e7eedde0014114bd6720fcfbf8351f9fbb83dd9e8f82acd7b782d092658ef7
SHA512

e99f5c6c1eabed0228d71df597c3bc0ccede72c36a4bdb0732044b0007055070dcc45a72a72db309b387a99b9fd80c300ff6a8ff04180d53dd2155ca824b0bf8
SSDEEP

12288:aadZ+WpYu7SvQ9Q9iW9gSN/D5FZgGfkxnioz/GzHw9H:aavpY4s59iuzN/9FWGsIokwZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f32d05faaa0076f74de62a4094d78141_JaffaCakes118

Files

f32d05faaa0076f74de62a4094d78141_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE