0418672823d9743259be19db36f690b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0418672823d9743259be19db36f690b0_JaffaCakes118
Size

290KB
MD5

0418672823d9743259be19db36f690b0
SHA1

a0fe827d01071e58b41280713b7eea7f4cbb6b4d
SHA256

b85b0d2d0b529644f1de937c8350cdb93891e62bb686e6b4b90a101599624fbf
SHA512

aeda87d8c0ecc929a01bb1b17c83d9a9185f153d878303624805428410aa90e8842182fe8199429dd58779b56d8e61a8c5316682357a2b693b05e75ea3d74ee5
SSDEEP

6144:c1SFg9WI+aPqA4HGkanLWfQMyu7OOpOdnYGCOnAkRT23jApD77:Ueg90aAGk7l7OOpzGpAk80p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0418672823d9743259be19db36f690b0_JaffaCakes118

Files

0418672823d9743259be19db36f690b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 836KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 281KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mini9
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE