c0efa2a869b76107d6d4f7a60125df3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0efa2a869b76107d6d4f7a60125df3b_JaffaCakes118
Size

594KB
MD5

c0efa2a869b76107d6d4f7a60125df3b
SHA1

a0600b19839425fa2d6d69c4cd92bfae037f7ae3
SHA256

3bce5c107af8f36483dc3ebc80d778b270499184bc2a7ebdfd275befb3eed21b
SHA512

a3f0f202c2e56fbecf5c9f1f3e9fd9e49b6491546ad1e1f9237eb2424be063001a5bd35a7f23142fa5a2fc7b69b76c00cf0e40285e659b1385955cb654db83ce
SSDEEP

12288:Sp1ETtBYDb18RUWVPS1uAj2c2kV3fDTauExZUiliS/KuV:SpwYDbd8PS16bkpDTa7liEKuV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0efa2a869b76107d6d4f7a60125df3b_JaffaCakes118

Files

c0efa2a869b76107d6d4f7a60125df3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 593KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE