7480af1b64ed8a8a4245f111bf17e6fa_JaffaCakes118 | Triage

Sharing

General

Target

7480af1b64ed8a8a4245f111bf17e6fa_JaffaCakes118
Size

365KB
MD5

7480af1b64ed8a8a4245f111bf17e6fa
SHA1

b294135fb41074229973b889d56c1194e949c835
SHA256

36f236a09028a8590037993148116ee9795ad6d24353e5c2fb181595eb84ca51
SHA512

7308d7e376c6849b675f1fd1ae983bbc268f08258b7652edad13cfe72a548489dbd29917b3d7609f181d1af953e3fed0c01792ffc2c605950be815dfb570a0c1
SSDEEP

6144:PbWlRil4zZiH+eX/57EGLlCZR4ZfCvVmCyTyyYW4PXUZGBNqM8k85tG/j:PbKRil4zZieY7EP8fCdmCyLB4PcGHojs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7480af1b64ed8a8a4245f111bf17e6fa_JaffaCakes118

Files

7480af1b64ed8a8a4245f111bf17e6fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 359KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 130B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ