88fd202dad9baab70737792892daaf67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88fd202dad9baab70737792892daaf67_JaffaCakes118
Size

348KB
MD5

88fd202dad9baab70737792892daaf67
SHA1

78c29cda2316431b29adb39563f96343e584b869
SHA256

32e6a75b2fce6d1d23df26080320f6866acde5bf5d0f167757647af451ec0e74
SHA512

9d76d271a1076fb6108e33f8034f6402e919e0d160ce8cf76f29047427d6506311acc976b484188f2e517f57942138efd96e3123ad85fcef87bbc558d25cd6ce
SSDEEP

6144:pf2tc4BfDazDCE4vhzt0H8OqMfdGOJcJHbEM4YrPmDQ327zIc64Z:hGfDazOECZipVToHbEM4YrPmAhcF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88fd202dad9baab70737792892daaf67_JaffaCakes118

Files

88fd202dad9baab70737792892daaf67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 316KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ