3bfc12fe43048c7dc84dad133769c736_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bfc12fe43048c7dc84dad133769c736_JaffaCakes118
Size

510KB
MD5

3bfc12fe43048c7dc84dad133769c736
SHA1

97f358ac6e5761f7042a7a8425a5ae20077b2273
SHA256

1f9bbc7a67e9e0737f4027cb1e0b0eaa0f93eb6139e8e514b8fe4f482484332d
SHA512

55a8420d921629488c0fe5733b28494e7e1ffa3d7781ed139bcb86a4e9220cdc698b001adcde216b537e261c7e718bcb6e21a6bc60e5013a5f7ed0f3849cd440
SSDEEP

12288:Sx48CxvIQwpb9xG7JK4pVZY5DBW/pSlAwUB2Ph14+vZJg:Sx48CkNHXVrWBWFQZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bfc12fe43048c7dc84dad133769c736_JaffaCakes118

Files

3bfc12fe43048c7dc84dad133769c736_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 510KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE