af2bf0d822f980b7577021822457b69a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af2bf0d822f980b7577021822457b69a_JaffaCakes118
Size

19.3MB
MD5

af2bf0d822f980b7577021822457b69a
SHA1

6a90b4cc34f1dcf075b3a66c54be498b37648b75
SHA256

29e2c3d3f67fe0d136a22827c1f68547a1541fc1648afa93b80c2fda6e14d9e3
SHA512

122aab6b6ef01391d3e3f9a6208084ebac4959725620ca0a4e061995a39b581e1a6bf37cfdd1c22dec2b5994116a64408be2a23a074be00cee7593624377c06d
SSDEEP

393216:ws91anr8d0huOEHGR/+jPOEc5r8UH6wtd0hzpLYuNrtdG3Qm4nRufoW:GAd0huvm9sPOx5rxTUhz2OXG3Qm8kfL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af2bf0d822f980b7577021822457b69a_JaffaCakes118

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_1

Files

af2bf0d822f980b7577021822457b69a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE