22752fb39a9f16d2f63f50fe3a547312_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22752fb39a9f16d2f63f50fe3a547312_JaffaCakes118
Size

97KB
MD5

22752fb39a9f16d2f63f50fe3a547312
SHA1

cc974956a7ef4dd926257c4cb0bc50bdded78041
SHA256

c88051bb5e456d2ea96e32821f68c2c9fa123928e905cb5804d77e8a0397fffd
SHA512

7f2c527dd628f126f108964ef83bf05c3a275f2f2603057d3404f79f1c53f217afcf6de0a2c1c04c85db3a98c8263d5974597910084464fde6806f1eb36c3de4
SSDEEP

3072:r/Wb2Y5GU6WWnL5I+gU2Ste87w0+vzuZbSx/R:c20GUnsItSteAtSx/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22752fb39a9f16d2f63f50fe3a547312_JaffaCakes118

Files

22752fb39a9f16d2f63f50fe3a547312_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

hanwuxiu
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE