686aae04c8fea3f414692c1f48788808_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

686aae04c8fea3f414692c1f48788808_JaffaCakes118
Size

1.9MB
MD5

686aae04c8fea3f414692c1f48788808
SHA1

f7b55d8f368e61417ccedd869f9a0f56dfbe30eb
SHA256

ec7aa00139d48dad75924a6a5b37cc4d781a3940ef083adcf75607962b483528
SHA512

62a8eb728c84663f66e4779e67fbdfcb0661a9c0b690a779f165125539031b6550b406ff2655cb4fae08bacaca2f0fc7082f24839b78b4594526bf1a9f4a4088
SSDEEP

24576:29MtyoW/Al79Bz8YUu5xSc3/X4a4P7PkvwT2E/+UAm4uh0SzwrOuqs0TPePAr:29MR79Bz8YUg/pGHTMUAm4uhnMqs0TP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
686aae04c8fea3f414692c1f48788808_JaffaCakes118

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

686aae04c8fea3f414692c1f48788808_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 904KB - Virtual size: 904KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 903KB - Virtual size: 903KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ