b11dd9031ca73cc6b2aafd95b351b582_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b11dd9031ca73cc6b2aafd95b351b582_JaffaCakes118
Size

50KB
MD5

b11dd9031ca73cc6b2aafd95b351b582
SHA1

b8f2eca3815ccbd264cfce18a4ad7209f480a5ed
SHA256

188ccc1dfc8bbaa1bf1d689bc56ed0a42b6fecf74970a642229bad59f1fa6fdd
SHA512

b84493de00b7027393b1cdb0a78671946f660de8daa4defc74ba6fb6954cddacfc6b8ac8a6b19d42451aa734e7c1f60e5ab06522beb54d71e8853fb8bd6e54cf
SSDEEP

768:kYyEah6uogkGUH70sunl1qBf1fLJUZqTmHY3UjRe2pSklpPp3xzDZPJT+U9nZ:CrIg470J7q1DUlYKe2p/pxzdZ+Uf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/n32upgen.exe

Files

b11dd9031ca73cc6b2aafd95b351b582_JaffaCakes118
.rar
n32upgen.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 457B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
readme_en.txt
readme_ru.txt