18c789a7ee7092befdf3257555f03dda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18c789a7ee7092befdf3257555f03dda_JaffaCakes118
Size

422KB
MD5

18c789a7ee7092befdf3257555f03dda
SHA1

bcfeed170cf49ca83a14dbff32e2410c672ecaa9
SHA256

b4f8b661e5abeae5f7f98e6ec10d54b6e0a439419cfae7d88a45dbb0e655a48c
SHA512

18a541cc2d33d7d27053a77332e134254d3cf6290e7a2743dcb35b273ad73ecb792935298baf99cec85ca3d97f6f92adc954c560fbf981a8ad4fb58b518f20f0
SSDEEP

12288:tpbwojs9PUP2iyq6cNwQliE7kt6oFxCY7n4Sr:tpkojs9PUP2BENwQlO/2ofr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18c789a7ee7092befdf3257555f03dda_JaffaCakes118

Files

18c789a7ee7092befdf3257555f03dda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 421KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE