5f6a356c7124e2d549bdb4d40a8ab028_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f6a356c7124e2d549bdb4d40a8ab028_JaffaCakes118
Size

384KB
MD5

5f6a356c7124e2d549bdb4d40a8ab028
SHA1

e6fe908c39c75a26c42f52d91d87205820c0dadf
SHA256

9d26ecdf4867b72c725ebdd9821affe129868d86c50dff2859fff398bec87728
SHA512

950990329ad951a4412fbe9736a54376de5bd3e539aa9e0a1f95e05262e20b753a4ea0955d8d5a897391e998cb229e94ae4c103a725b9001f3453be878b86110
SSDEEP

12288:U2HvUbLPENFrTOCiDaL/mkpGZHmdy9AFU3Cl5xnvwg8C0s4u:DsbLPENFPORDa6kpOms9AFoS5xnvBF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NSWEYE.exe

Files

5f6a356c7124e2d549bdb4d40a8ab028_JaffaCakes118
.zip
NSWEYE.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

zAA0
Size: - Virtual size: 940KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zAA1
Size: 372KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zAA2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eyeset/eyeset.ini
eyeset/eyesys.ini
eyeset/okfile.ini
eyeset/sysfile.ini
eyeset/vfile.ini
readme.txt
ʹ˵.txt
˵.html
.html
˵.txt