8563ffe7532cb41c3e04d952222ac657_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8563ffe7532cb41c3e04d952222ac657_JaffaCakes118
Size

637KB
MD5

8563ffe7532cb41c3e04d952222ac657
SHA1

8814c666bf285943a6266e3774b107ddd152bb35
SHA256

dd480381fc76e3eb4956970d25732157c2b2c92a170ff665b7fc047f6683fe5b
SHA512

2859838abe26138547fb3e0c4bb004aa76bde48debc1be75633659b961e3f9d3db95943f775508c3540d2239987267b2b0761da92d08933457b8bc8b0e00dcba
SSDEEP

12288:wLKH/OgT4L3yhE5ax/hCBHpdrtKmCFeLICVAgQbVzm+Pp5ORRONf+XP571bvTi+1:wGHXTg0E2/hCBJrPkCOhVzEH64PLxtcS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8563ffe7532cb41c3e04d952222ac657_JaffaCakes118

Files

8563ffe7532cb41c3e04d952222ac657_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 635KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 286B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ