960d9c6727b3029f3b409565b7237ad7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

960d9c6727b3029f3b409565b7237ad7_JaffaCakes118
Size

532KB
MD5

960d9c6727b3029f3b409565b7237ad7
SHA1

3e3944098b8ad375c77af41c7c71b9977c0d5342
SHA256

6d1d7760af612e2769aed74c02956f0884f0099afd12467cc1eccf3e2a925b29
SHA512

153ef74b88165062b62f23bc2e0cf48e8297bec46c67bec7a8daf99cbae847bc3796f9f770950087b8905f7158a0093f5ecff0f9d76102b8e52eda84129d2e5b
SSDEEP

6144:5y3v7H/Lbv8hu1zsjM5Wn9pTkDTJpyrZdBQZvGakbHxvM:o3v7/v2MsjtXTkDTJiBQZvKbRvM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
960d9c6727b3029f3b409565b7237ad7_JaffaCakes118

Files

960d9c6727b3029f3b409565b7237ad7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE