4831e7b5694187b3e37cdc9c08737efd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4831e7b5694187b3e37cdc9c08737efd_JaffaCakes118
Size

1.1MB
MD5

4831e7b5694187b3e37cdc9c08737efd
SHA1

326020821a5b9fee8d18b9c7cff93ad1dabdcdc2
SHA256

1ceda634cf7395e36f7a5c93e8a87186c5a11728bd5af0fdb99790c8a22b6d5d
SHA512

38e1f89e5b3dfcfac82a6de933f6a0a0cfd7446f500ee9fa049ddbc68fb97233ab4f497b47dbe27acdc3cf503ff79aaba96d6ed566cdef2e152a58aa7bb4ad1b
SSDEEP

24576:TKYn3LFBdYWv1HOrBOKL4W9Ic/zZWelO9L6NBHmseR9zD7rLZvYyH:TKY3BBJdOroA4E1zvlSSzCHrLWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4831e7b5694187b3e37cdc9c08737efd_JaffaCakes118

Files

4831e7b5694187b3e37cdc9c08737efd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE