fb2a17d8225b022b936ca3cfa6ba8dca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb2a17d8225b022b936ca3cfa6ba8dca_JaffaCakes118
Size

670KB
MD5

fb2a17d8225b022b936ca3cfa6ba8dca
SHA1

8899b3104860394971bf09f90c7edaddbc737c15
SHA256

4b3a2bf6aff8660433ed898ef86f8c701d66b5f82685e227edf8fea17f7ad2f3
SHA512

b21c761479d45c5141634c6cd900d95b86f8315e22ec5b6762e4eadca61eb3fb79c3f299992e833157c0d447c37bcdd0828a5487eda2fa57050f6e4902724c14
SSDEEP

12288:BmLdZ5WOiyeKDyh2OYXMCbdBGaKFWIc4jm8TqhiDbnpy1DAiE:BmrZeKhOXWdBGaSW0ea6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb2a17d8225b022b936ca3cfa6ba8dca_JaffaCakes118

Files

fb2a17d8225b022b936ca3cfa6ba8dca_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 663KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE