694d4f6a60150c32ab00df51dd164cd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

694d4f6a60150c32ab00df51dd164cd3_JaffaCakes118
Size

293KB
MD5

694d4f6a60150c32ab00df51dd164cd3
SHA1

e53d802e7b901b43448a80bb8c1e5889d88dc816
SHA256

63499f95777623e00280a07862931ea1fb269f4048ac6bc39d0233b3db68ad47
SHA512

deaa5053c30397ef6c0a93d8527639c66c94befdc11b2926576208b386e320e28156c947085b0eb2a45ab9813a6eb06e8aacc913ba8dd41117a53853a1d72221
SSDEEP

3072:nAf2dAem1Y8X1MpIP+nCG8rdKF202+fOS6OItFj17v6JJgKdzuSfFpnyxMv6dZ:nAh+pIP/5KFz96/y5dXfjyxNdZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
694d4f6a60150c32ab00df51dd164cd3_JaffaCakes118

Files

694d4f6a60150c32ab00df51dd164cd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 292KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE