87140b77c77b120a36b4048f750face5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87140b77c77b120a36b4048f750face5_JaffaCakes118
Size

537KB
MD5

87140b77c77b120a36b4048f750face5
SHA1

628214580b02572c5644ec0f776ece8e46210014
SHA256

f669ce3ec96ca58b1cabf3e0ed3eff3e5f7a28f70545568ce97d8e950f54878c
SHA512

bc8997d0dce333c78391e231cdcc33f30fcf096292936eb25347c13ba3ec98925cfb6df37f1eb4df7690a8460fa5bed4f865d8058cc8892cb3208b90b5b0a53b
SSDEEP

12288:VDdodqkuX/F88AsvPYeBdBtMKeVWT1Xn0+9xrbKDNwdCyN4jcUt:VDd0sF8fsxdtkM3jbKDGrycs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87140b77c77b120a36b4048f750face5_JaffaCakes118

Files

87140b77c77b120a36b4048f750face5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 504KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ