6a49bfd0d74e670c77edd9dc6448164a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a49bfd0d74e670c77edd9dc6448164a_JaffaCakes118
Size

284KB
MD5

6a49bfd0d74e670c77edd9dc6448164a
SHA1

81be0f43ac6678b1c1a02a716fca520233097ad3
SHA256

6b7bc12c14417f7d2c4fc263f07ef6ae7a1754f5601ed7dfdf8dc9a151c6a3c9
SHA512

134e78cbb6dd93645c8df482a2b84d017ff26832ffa5fd04c40dfae24e2c8c837d03ff93c73b91f5abb6e9bc015773de05849eabc2273a938cfdd38f9d6133b6
SSDEEP

6144:/UsfsjdBcpHKW7Ncdpjx8uPym1xvdNO0F5w0kouEZO6BiajTd:csfsjzYHKW7WvPDvnLxvZqa/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a49bfd0d74e670c77edd9dc6448164a_JaffaCakes118

Files

6a49bfd0d74e670c77edd9dc6448164a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 283KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE