397708b63aa6b4be5942fb87dc3544c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

397708b63aa6b4be5942fb87dc3544c9_JaffaCakes118
Size

180KB
MD5

397708b63aa6b4be5942fb87dc3544c9
SHA1

eefb47caae891b0fd20959263ff4b8773b2bb511
SHA256

86a9d5cf8f7a646f74601f81ca18be3ab029681e0ae3bf8ca68d26cceda36b2e
SHA512

7aea84a8dd2c5daa1220b875ce6ed66e1e668ee777b03b80d517649b4fc90d36b960733ac386e00e4b6fd40db99632b3406ff3b4dae117181094a67b84cc7e6f
SSDEEP

3072:qWKUcFyaqn3HJySrZgkRCfDbL+Ph0Qgsp29iep+kqGQZ/QiHluZVs95:qWXRas3JykZgcC2WsE9iepUZYio25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
397708b63aa6b4be5942fb87dc3544c9_JaffaCakes118

Files

397708b63aa6b4be5942fb87dc3544c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 179KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE