167600897b04aa5ba68850ff3879227e_JaffaCakes118 | Triage

Sharing

General

Target

167600897b04aa5ba68850ff3879227e_JaffaCakes118
Size

729KB
MD5

167600897b04aa5ba68850ff3879227e
SHA1

c781aee1c8bcca564d24605b87f93a00cc60ffc3
SHA256

08b3ef52eeb8ed0f77a09b58e096a8b6ce331b7071df75be62f5afb6ef303fc8
SHA512

add596a4848090c1c6da06b81ec7b17d6d4c49f0c588397456115e457ecca82628aaba036ef0e89c18b9d834fbadc420a46be546d40c8cada81c17ad1c86d456
SSDEEP

12288:Duf9QTvnDpgc4d99awAf/Ulhc8bK79EDlt5S2716Eh/7C7GGdNpwFHLptvAeoxay:DCQbycC99gUTw72l7BoQjcGu0HLpaMy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
167600897b04aa5ba68850ff3879227e_JaffaCakes118

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

167600897b04aa5ba68850ff3879227e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.heb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE