a021705de373a35d2173678112fa36ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a021705de373a35d2173678112fa36ac_JaffaCakes118
Size

3.7MB
MD5

a021705de373a35d2173678112fa36ac
SHA1

1aa1f5f5b2bdb423151f96048e13ba7d5d30f1c2
SHA256

ef56a74b77c79f869ff2aa142178e97acfcb15dc15e4d2dd82de7a9d541747ab
SHA512

c1a747d40a259234eb08d890f7444104a5d67c5ba8e901961c6715fa70e0fe5abe03960962c6616f02d4423110dbfdf10e10fe3777e205846a28dd1ae501c924
SSDEEP

768:+MGnYmtcLDs/saQRy7rnzrKHgccoGv8uS08p44vGljXO3XJqJRnS5EbK7eM:2oLDYsacy7mHMowH2XJL5EbBM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a021705de373a35d2173678112fa36ac_JaffaCakes118

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

a021705de373a35d2173678112fa36ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data
.idata
.ndata
.rdata
.rsrc/DIALOG/105
.rsrc/DIALOG/106
.rsrc/DIALOG/111
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/MANIFEST/1
.xml
.text
[0]
[1]
[2]
[3]