c8ff92805501b39b5f1276bfa56f2834_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8ff92805501b39b5f1276bfa56f2834_JaffaCakes118
Size

283KB
MD5

c8ff92805501b39b5f1276bfa56f2834
SHA1

a4028ed95964087ce99d67a89168cd5c50c07e01
SHA256

afff10afe056e114e2ae4da9962d88570759f05fc9c6106b82df594012b5da05
SHA512

126599f2f767cb8425904609cf706e05bc41d463593fb63a7f6aba265abe5e4a76bbfbb2997276a7ba86a5299b82faab37e09a03eca80fbb158404449d120eb0
SSDEEP

6144:7bKTW3Zd9aVKR73LRMGJkuZpgIN7cykf2T6dtLX60D1r9AEM:Ppdg0rNMKpp7c2EW0N9vM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8ff92805501b39b5f1276bfa56f2834_JaffaCakes118

Files

c8ff92805501b39b5f1276bfa56f2834_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 277KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 224B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ