c97ba4424299730db2909d9d402dec59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c97ba4424299730db2909d9d402dec59_JaffaCakes118
Size

292KB
MD5

c97ba4424299730db2909d9d402dec59
SHA1

eb0e84b639c47953f0583dfc6939512d535fb8f6
SHA256

f87e54eea0d98feece9476576aa37869a2606b58d52035b9d56e36bf47235e98
SHA512

b4f61d664c236addcbcaed5d370fb5249347e11594b7bffffccce0b3b239881fedf9e1373cf0ecd8b4622748f32bc7c669ebd44432fea73c9bd30d2e6d4bd9cc
SSDEEP

6144:IVSv2ZjqNYKEUHBC8rHLT6QDXh0/3ZFqEKhh8XM5oPM8DNbAvH:IYvUqNYKzwoH6Qo3z/Khh8X+oPDgH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c97ba4424299730db2909d9d402dec59_JaffaCakes118

Files

c97ba4424299730db2909d9d402dec59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 262KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ