325fb556d0d330fa6eb106d388db0971_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

325fb556d0d330fa6eb106d388db0971_JaffaCakes118
Size

274KB
MD5

325fb556d0d330fa6eb106d388db0971
SHA1

fb8bf4c22851e58340ed406d5f1101dce95091e8
SHA256

a9e77d355a0ea9c98d16989fd2db4b45b4d1171b51f9e89b79d0130e629faa3e
SHA512

68d29ab1144e694f1daff789c09bab4666b28a016de695e24df33a9ce9a222b0fa54c6be4ac57011a955f4566ab6ca9d9391d9413926c235c0a625a67b67ca2e
SSDEEP

6144:N1gWxspk3TUzasxYUT68rLsxF5Fq/t4Hx2CIOWg6vA182DVw9:TgW6k36xYm6DxFbrx2CIOWg7BM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
325fb556d0d330fa6eb106d388db0971_JaffaCakes118

Files

325fb556d0d330fa6eb106d388db0971_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 273KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE