2d2474f9014b04e60ef3e90aa5433643_JaffaCakes118 | Triage

Sharing

General

Target

2d2474f9014b04e60ef3e90aa5433643_JaffaCakes118
Size

364KB
MD5

2d2474f9014b04e60ef3e90aa5433643
SHA1

955682c30fda02a68a45e818afc1358aaf7e2414
SHA256

7646defaf01fb13e8fd69588fdaa816ae992c2ee7ee93e799248e09b250ef1d7
SHA512

ed23c56d6cf97c3984c9a3908666049a0deaf8992720f3f0610e5262a210abe9e223693eaae86af7ae882ff4ab9ee131ed6c89f838484b592605bdf5934dbd15
SSDEEP

6144:20pzrpzJjgzkV3Xn/dr8F+JrJf+G3YfLDpzCpalQB4JMne/u/clXg:20lrpljgzar8FElYLDpC8lOFeW/SX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d2474f9014b04e60ef3e90aa5433643_JaffaCakes118

Files

2d2474f9014b04e60ef3e90aa5433643_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 358KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 265B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ