708221fb75996bd47cafcf2f5c6ac13b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

708221fb75996bd47cafcf2f5c6ac13b_JaffaCakes118
Size

4.0MB
MD5

708221fb75996bd47cafcf2f5c6ac13b
SHA1

cd2be490259a8e2533a71e3234c0b0fda83f00f3
SHA256

a699af0786654f0595f597c8e374347a43ce43c372fd9186fd259d169d50040b
SHA512

1597c4560d88d4f970907a8be84ed65b60a9b5f8350d14a121534a1d30d0e2bdde7d9600c74f1edffe4e7c9c591b48917c147507ad7562ae9948656a01e5856d
SSDEEP

98304:Z8xqT4NtJe/cbhXXnCr3U85daVBAemIu8Zv+NHSc6vZr5hxDH:bTr9yQ8Zv+Nyc61NH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
708221fb75996bd47cafcf2f5c6ac13b_JaffaCakes118

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_1

Files

708221fb75996bd47cafcf2f5c6ac13b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE