ace00df673b139f2e462dced72c793d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ace00df673b139f2e462dced72c793d6_JaffaCakes118
Size

361KB
MD5

ace00df673b139f2e462dced72c793d6
SHA1

cedad38cceea8055f6be93c95b6e4bf07b5f3bf3
SHA256

aa9cfd752efdd978e0afd68f81e137507db4eb09dd846f303f792b04a55bd242
SHA512

f323f55827f8575280f00075e529be59e05e54a4e02275c96527dd5c6cead6ff1057c17c34e1f3881625cc8b82ea728fa928b32cdc71abad240c6b7c0213c4a1
SSDEEP

6144:CcvYzsKsKD8Je2ilKAA86B8jXmS/4qiqPB7cTRh/0xS3rVqcNozgx3oBnkwwu:CcQzsJKDcD8g8j2SwDIV4+S3rRNFKk6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ace00df673b139f2e462dced72c793d6_JaffaCakes118

Files

ace00df673b139f2e462dced72c793d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 361KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE