f76cff1fccebc53697bde16c39ac3df6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f76cff1fccebc53697bde16c39ac3df6_JaffaCakes118
Size

24KB
MD5

f76cff1fccebc53697bde16c39ac3df6
SHA1

1fef1f8f31d478d339afcec926d27673966f6be5
SHA256

9b5e08e5866481b03f412ceaa8bbe9ccc78baf9a19bc6b9abdc3759ba9adcc97
SHA512

afa6a038cdf8bbd8db2ef0f3db1e1c61d7cc9b7eeed02897feb9581614b6461b471369d617b972e217a838b70e16325b0cb92474dbd303745febb59f84d97102
SSDEEP

768:J32H5J2ZCeFL3qjUTw0w5sNMBYBz4v1/nL:N232PFLVwN5xBY6RL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f76cff1fccebc53697bde16c39ac3df6_JaffaCakes118

Files

f76cff1fccebc53697bde16c39ac3df6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE