679bd6cfb91a42172db8f9b90480e4b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

679bd6cfb91a42172db8f9b90480e4b6_JaffaCakes118
Size

381KB
MD5

679bd6cfb91a42172db8f9b90480e4b6
SHA1

0f4641d89ad433c6203d5f7112f7d76ce462dc77
SHA256

42cb4569750d2f5f8544015c72e124858fa7d467ca3731536d04cae5473b3d3a
SHA512

afea9f21d3aec9d94f44b869ff674ad18e0a913c043b39411bdf97f640a3f4eaf5da980872566addf4e6de6eb14863d8b9bf340b72d446b6a734c8592e6ac431
SSDEEP

6144:qFLGg8cUKAQ/YMNMER/Vt0QKg/55KeLoP3DsGe4/PALA7u4WPPt4gFyaiSwGJ68:oGg8IPN7/8QKO2eL5S/k7qTGx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679bd6cfb91a42172db8f9b90480e4b6_JaffaCakes118

Files

679bd6cfb91a42172db8f9b90480e4b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 380KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE