323ff751de46f01b6c7cf9aa48257769_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

323ff751de46f01b6c7cf9aa48257769_JaffaCakes118
Size

5.6MB
MD5

323ff751de46f01b6c7cf9aa48257769
SHA1

a105b741845481cdc96e2fc34bcf39fed7843c4f
SHA256

c6da936128444d0dc2c25e159383e44cc2dc788ff2ba49c84cb14f215490892d
SHA512

60f60e8c9e4db5179608ff133e470db4ff3d59ef3a00e2783bec61f52dc66aa0fb0b73f9f18c58b913509e1439d8ada8a29253e03523e14431edefdba9014162
SSDEEP

98304:SxPDdMQFB1+MvLbmzAR3mz6P2V/7em5j2yRAftgyQ8AemiRnZyHAX/hx0nQ+OYC0:Sx7dMobZR3m22trV2v1gYDmOyH2D+7C0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
323ff751de46f01b6c7cf9aa48257769_JaffaCakes118

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

323ff751de46f01b6c7cf9aa48257769_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE