c098ef6bd0f733e5997798747ef92dd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c098ef6bd0f733e5997798747ef92dd4_JaffaCakes118
Size

368KB
MD5

c098ef6bd0f733e5997798747ef92dd4
SHA1

20e909a67eb8a1f95bbe624eb774619ac7f8a718
SHA256

5a7b36f0b667bdb4c9ee0ac59dba5aff7e797f306e96d8324bcb06078788c56b
SHA512

339b7e3efa25f8a63d129dd045a6a8f5795fcb4c4b9817a77bb132412994ec0c689653e249a537cffbbd8521c206986376462a61f1e2d187b917463e3cbc0b34
SSDEEP

6144:XN8tzH4yrxzz3rdyx4giprHDvy1Vf2Z94CIeul8XBEQGkWD:XNiYylPq4pj22ZJIeC8Rk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c098ef6bd0f733e5997798747ef92dd4_JaffaCakes118

Files

c098ef6bd0f733e5997798747ef92dd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 367KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE