d6346c1bb82ab62a86ef7e7073b7dbe1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6346c1bb82ab62a86ef7e7073b7dbe1_JaffaCakes118
Size

284KB
MD5

d6346c1bb82ab62a86ef7e7073b7dbe1
SHA1

8a5ff55d0cd5214961f186bf65ad2c558b5ab71a
SHA256

83813f09f212fc9b9ac0cf2135a8d139cd29cad2d34a748a203a06828bb25b1f
SHA512

ae04f9ed90e8750baaba89bbac994423f75fc964ac3ff6ec21da5db9d4ed591970b2a65b5a55ec1a16b820796619e040e1d0c5abc6bbcdf0be6d645475cd74ba
SSDEEP

6144:nAF/N211ZY0Rffj3PIlVCNFYIEABnx4tW2XjB+dv55:AFo/pR3LPIbGFbQXd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6346c1bb82ab62a86ef7e7073b7dbe1_JaffaCakes118

Files

d6346c1bb82ab62a86ef7e7073b7dbe1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 270KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ