2c5947bca2a3e5261c492651022027c4_JaffaCakes118 | Triage

Sharing

General

Target

2c5947bca2a3e5261c492651022027c4_JaffaCakes118
Size

19.9MB
MD5

2c5947bca2a3e5261c492651022027c4
SHA1

47caeb211dcd9b06cac46dddb55ef160f6c0365d
SHA256

033b5000a03c24220cbc85d12f0cb8777a608073445075111a041801e81b98a1
SHA512

98b3c5b32c32b0e738faace0f9bfcd4ff4ee33e95d3fa052c4e401f36c263b81d2c94186b28273444e8592dd92e60c9f8ae9248835e2c11c30734456c1cd1f51
SSDEEP

393216:X0NJMeJpFkT+uOKeTFw0u1gfrGntm4KzPxL/7fUAgPA/J/w6evvgb1GhwpQY5N:OBp6TjeTFE1pn2lfaiJYvy1YPYT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c5947bca2a3e5261c492651022027c4_JaffaCakes118

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

2c5947bca2a3e5261c492651022027c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE