32bc5224cfc9b4d2cd54f7d33a633a6a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32bc5224cfc9b4d2cd54f7d33a633a6a_JaffaCakes118
Size

468KB
MD5

32bc5224cfc9b4d2cd54f7d33a633a6a
SHA1

e3b66fd5b47d9fd9ef296839e2285ca76d11ad45
SHA256

95cf99a0d20f4f0f0bcd379ef1cc9ee890c1e0e3f84b2d5d4828a738104f555f
SHA512

8b109bfd7affa77a986bd9bcfe3a55e03187301fdfd8f9e3ea29b46314ef125767f78cc6b8ad2f6605ffda6389b7f3c0bd907b9ea4ed8b6fc5394c91f0408643
SSDEEP

12288:ROkO6eCvaP9shxV5RaGa3oucYmbaYbo2wYOEZdSSgwj:ROkOCSlExVelcYmbaYb3RXj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32bc5224cfc9b4d2cd54f7d33a633a6a_JaffaCakes118

Files

32bc5224cfc9b4d2cd54f7d33a633a6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 468KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 977B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE