d213c4f721ee6c47de5dc6023901d3a5_JaffaCakes118 | Triage

Sharing

General

Target

d213c4f721ee6c47de5dc6023901d3a5_JaffaCakes118
Size

4.9MB
MD5

d213c4f721ee6c47de5dc6023901d3a5
SHA1

86614c3f55446be7d958d6390eb242c3143e5a15
SHA256

8d47b6452b3497c4d68cd3a473d7503ca5d1c35f308f8dd2da72d37acbd9fa18
SHA512

b87341c7bdb801842da418bc8075d557bf456947aaa0cb4b7a68c977a6510abc0fd2ed259908f106cc49ff0ab4205ae15fac0c1adfc43693e5ceb77500499dd9
SSDEEP

98304:hzLhsOy5k13G3OHPaPQepKbMAO2r+9kY8hWjfy6zp9NQnJ5BAa:h51IQPeDo+yvhWdb5a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d213c4f721ee6c47de5dc6023901d3a5_JaffaCakes118

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

d213c4f721ee6c47de5dc6023901d3a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE