aa5cf6f0ce8f439f5ffda14eaadafc0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa5cf6f0ce8f439f5ffda14eaadafc0b_JaffaCakes118
Size

555KB
MD5

aa5cf6f0ce8f439f5ffda14eaadafc0b
SHA1

d69aa9c690f6a4b3942b661fb93f777577521ea7
SHA256

6fcb2d367a0a79f2f8a03607246b7ed1717d1aa2f0d7a4b59e5fe579ea6b42b1
SHA512

206cca89d81743bbacaa6eb59fbf0d4198454b3bc3d15ba1e896f681ba07323fb762796b07752ee7c3450c206f18019f59a42fdc82aa75fda38ecf020625f399
SSDEEP

12288:eQIf3u3DRVuqcuX/Y7FHDc9YsrANR6bCmyKNYf16eCvSLq:eQSuzbqCSY9jbYBUvgq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa5cf6f0ce8f439f5ffda14eaadafc0b_JaffaCakes118

Files

aa5cf6f0ce8f439f5ffda14eaadafc0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 554KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE