3f205b04aa06f5d307a66ac190f66776_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f205b04aa06f5d307a66ac190f66776_JaffaCakes118
Size

349KB
MD5

3f205b04aa06f5d307a66ac190f66776
SHA1

f006ee0aeace1b4b8ca35618bb921eb20da7cf90
SHA256

51a4f91e1ad2ca00c08f672c7496efd2be1c426175e829c4e435043b41232b41
SHA512

99138adc139013c9ac8624eec69bccb6a35cd5160629593cc727782b76fd97555f31e53ad57a28bf94cfe7e0149ef932637373b79cf87b158c1b17adf3d4e9e6
SSDEEP

6144:B4VOriPShWNaZooJEHj6BL4K2j4EW6ETlnhBMUtB7Vngk3DQxFGxpTPSpXdNyV:dFhkaZooJEKUDDE1tpVBDXz6pb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f205b04aa06f5d307a66ac190f66776_JaffaCakes118

Files

3f205b04aa06f5d307a66ac190f66776_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 344KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ