258117105130f5044cc9533604c58bae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

258117105130f5044cc9533604c58bae_JaffaCakes118
Size

15.4MB
MD5

258117105130f5044cc9533604c58bae
SHA1

425805098bff958082618b43e66993148192d14a
SHA256

deeaf275775c146f40f75f142695f102c2c5174d6353f95fe9eeddba63bdaa2b
SHA512

89acd4f17557053dea094c3485cbff01070086a01b32c97d4dc0de041f98919f32244db14f4e49ebf8b09409e769fd4851c40c00bfedc20f0dced335b785d9d5
SSDEEP

196608:CpQnV3WLolNZt9V58UwZsf7PyPq1dKR1ZghTbyt:nRt8UwZsOKdKR1Z6St

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
258117105130f5044cc9533604c58bae_JaffaCakes118

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

258117105130f5044cc9533604c58bae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11.2MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ