3e4c8ce304a58dc6997185fe94c3972f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e4c8ce304a58dc6997185fe94c3972f_JaffaCakes118
Size

191KB
MD5

3e4c8ce304a58dc6997185fe94c3972f
SHA1

0745acffd3ca041bb2e2c37294feee1625ef4d48
SHA256

17d42227cd4ad4b4f9654d4cd0c7bc9f31763df50a80db9afc18d15528c9205b
SHA512

6903bd1f35ee1f6ee61af521276801e694c6d1b35494cf784b7c980dfa3306b8e9eaef36bc4b03c0595e59a3c8e24ce658a6692cac49e25313273202e5d13f4d
SSDEEP

768:CSloVlpQE2MQGc6rDh84nSwN15G4DoF/O71mJ6pcpR3K05M:PYpQtMDc6fnpJmJBBVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e4c8ce304a58dc6997185fe94c3972f_JaffaCakes118

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

3e4c8ce304a58dc6997185fe94c3972f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE