3cd2cab5fc61786a17f628ef4ed8e996_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cd2cab5fc61786a17f628ef4ed8e996_JaffaCakes118
Size

463KB
MD5

3cd2cab5fc61786a17f628ef4ed8e996
SHA1

8966000de30ff2a82e0f7564ada4d79bb04266bc
SHA256

208a49d0ee2fe9189dc3df7bce23a74f4e5adc890e174bb269f9e724dcba16a3
SHA512

fd3eeb4ee1312e8480474c0272cccd7d0fe2e5781aa07a17a63fae694f5c345b2c0e94916f45147c6b28c5896a11530ba65db27941430b1c5771551b19a3cbe4
SSDEEP

12288:x3HFkJy2Sz6n2/OO6kGDqMMcUechVAZe1qO:lqQL62n6kGDqMM7ech8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd2cab5fc61786a17f628ef4ed8e996_JaffaCakes118

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

3cd2cab5fc61786a17f628ef4ed8e996_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lif
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE