72b2949a8489c91fceb807d1bb814445_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72b2949a8489c91fceb807d1bb814445_JaffaCakes118
Size

640KB
MD5

72b2949a8489c91fceb807d1bb814445
SHA1

5414dd944af103f190c0e85ac0b59c669546fca8
SHA256

fc680ec18e1e087f5c269b6c83d4d72d88c5c00ea90d97dcbe30a4ffbc5d1d15
SHA512

dbe56bc7f9028b6be5fc5fac13aacdb65341608565a40a6a93a2051946457396eefbbc6de1cddc46482da589607bdfe5ca2e532ae62f83d92cfcb1b8f558a8fd
SSDEEP

12288:YkpWAif3SrG3sxPS9yjRdGUwBX5tbHByydkOyS1mUWVOy16D:YUBi80oaAjRUUwpBjGOL1mjVOy16D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72b2949a8489c91fceb807d1bb814445_JaffaCakes118

Files

72b2949a8489c91fceb807d1bb814445_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 639KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE