5f8bc97ba77a72c48bda8b9c8fac6ba6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f8bc97ba77a72c48bda8b9c8fac6ba6_JaffaCakes118
Size

9.2MB
MD5

5f8bc97ba77a72c48bda8b9c8fac6ba6
SHA1

e0de126ffd36f83b6c2c9e8d5ee5cb2fd30be810
SHA256

0deab421f9c3bb7299ca65fa3371ee721169febb69caa29d65ffcf730dd2dffa
SHA512

72f0df31916e41109603b467a478f66e73e85bcbaddf8aa401a04425b4da225df782358aab589d9b61a790b9364a0a380217b6da74ae5d3e5b3a06cc4cabc7b5
SSDEEP

196608:wV6Ktq8GgFwHx5ZmEihraHX/4C5cgf6XVUfEe0CVm9iVGf7:0KfH4zhrmj5ckqUshCVm9nf7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f8bc97ba77a72c48bda8b9c8fac6ba6_JaffaCakes118

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

5f8bc97ba77a72c48bda8b9c8fac6ba6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE