06ad89e5b36c81db76b691fb00f81567_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06ad89e5b36c81db76b691fb00f81567_JaffaCakes118
Size

415KB
MD5

06ad89e5b36c81db76b691fb00f81567
SHA1

55c71b185726c63aa62c52803850f554ebe9e2c2
SHA256

38edb758c6ed8c334327226b2a5fc9b6348e8967bc8e2abdd9c205d21a9d1732
SHA512

eaf1f6c05d7f0181a67828eab44346fd0dcae3b0e744f7734aae04496c4b6a4e2ddee214e5ebcc57998e930aa85e58f037dfa571859d65da6738d91a1a1fc706
SSDEEP

768:pJChTypVTFylNCQKowZS4E6SynTruH712N3pAwFBOV1mJ01rObbwGM:pAhTyTTFQNC13U4rtnDpAtmJEObhM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ad89e5b36c81db76b691fb00f81567_JaffaCakes118

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

06ad89e5b36c81db76b691fb00f81567_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE