b59c78419feaa10f23c2343cda1fd038_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b59c78419feaa10f23c2343cda1fd038_JaffaCakes118
Size

276KB
MD5

b59c78419feaa10f23c2343cda1fd038
SHA1

52adf6084502f2adbda601a691b00ad144304dc6
SHA256

542dc1cd9fcdbfaf86a4861277f5c91e0acdd72ac1aaa743c43df8ee82b57875
SHA512

9554e1aefaefddf8b4815944c3c78a14410cbac21b0f39ab2804b7adf47e4a1c82bcae576c8606e585debd121e647844095d53dfbcb40a8a194b2e6503d459c3
SSDEEP

6144:IwMPtSZ+wqF8KvOKMoOriG5eCBsSPh43kYvo:dMAZ+n8QMoOeSeAdhCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59c78419feaa10f23c2343cda1fd038_JaffaCakes118

Files

b59c78419feaa10f23c2343cda1fd038_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 270KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 69B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ