1c44405f8a378e524445541a4803f13c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c44405f8a378e524445541a4803f13c_JaffaCakes118
Size

3.4MB
MD5

1c44405f8a378e524445541a4803f13c
SHA1

3b510c486263903aa22e7cba05121b16a427559e
SHA256

d4b7783c885279c766b97d6bbd88f3cb8aa70035694f6bf6067d458ab566623f
SHA512

3a1c4eeb8e90dc63641c594cba16f18496a129fdda3c38026a3a3b10d7d87fe8c416558bf02c82bbbaef9d07573f9966db62f57d51e9c0e817962854ac909be2
SSDEEP

98304:mQ7u623X84ia6Iv+V5mG+KxQg/29hKu2aWo:mQC6FCw3QUI4u7Wo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c44405f8a378e524445541a4803f13c_JaffaCakes118

Files

1c44405f8a378e524445541a4803f13c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE