fba9965ba059779a9927c2bf34dfe54a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba9965ba059779a9927c2bf34dfe54a_JaffaCakes118
Size

27KB
MD5

fba9965ba059779a9927c2bf34dfe54a
SHA1

21878996429cf119b575a8838ee81532496f4c71
SHA256

7d7bf66080e8eca715abf3ff65dade1aab2d6c34a78d349350ac44df347bec1d
SHA512

0d0e21ba8252963000947902509f7441a6b6ee8f8237279e37e21b1d9959f18ad3bc24e3dd01d16f4afc47d9ab85ec476ad361bdbadbb8c7a004d5391686eb28
SSDEEP

768:nITbLLkQoIMstrZKBKgd4oK9+Y9Pf3raPMD:nIPEqtr4gZN9Pf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fba9965ba059779a9927c2bf34dfe54a_JaffaCakes118

Files

fba9965ba059779a9927c2bf34dfe54a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ