a1326a63a72661ff0673de026140a2de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1326a63a72661ff0673de026140a2de_JaffaCakes118
Size

13KB
MD5

a1326a63a72661ff0673de026140a2de
SHA1

0feb4f26cc48cf73ad1f05b9651d4fc6bb3d1444
SHA256

c1cd35bc90238e599ba48f03f7fc19ee3139fb991b0095ab4fbe9328b4f4f287
SHA512

7b005da3340d7eada0c1d041a1b21e6abf48e59222692010e814c1eba1be7c7d2dd5a93ffa5b424b1910c17af69fc55aad8fa09ac5d60f0f2fb49de638eaaa6d
SSDEEP

192:rF1tCGOu579tK/DBIrJHAU2cnmZNzzoLIbJJlJq0rNzjF90z+:rF1wGOuhD+Bwg1kaNzYIbDlTNfLe+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1326a63a72661ff0673de026140a2de_JaffaCakes118

Files

a1326a63a72661ff0673de026140a2de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 1010B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 151B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ