94b144ea55663fbbaa60aee5a4bf79b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94b144ea55663fbbaa60aee5a4bf79b5_JaffaCakes118
Size

275KB
MD5

94b144ea55663fbbaa60aee5a4bf79b5
SHA1

a40e4cd462f6c0432723e51f0ba0a18fc004b3fc
SHA256

59b3a3730c502bad9798840f48aed4b1b87df752c1cddf754b650fa9bc089aa1
SHA512

fe3f75fe7cdc4cfbe4f6d1716fa93c3052a9f6feb72003c89c35398445d6c18a9d042847ceef71f3113a9378ce7c58ee2dfd94ee4132414e8b787fba55e11d62
SSDEEP

6144:sU0OS34q6SWZ9ELF/9PSurt5+QVhNYI0gN7ztLC:svOS3X6KLFlSup0QbNJ0ghztLC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94b144ea55663fbbaa60aee5a4bf79b5_JaffaCakes118

Files

94b144ea55663fbbaa60aee5a4bf79b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 270KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 168B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ