d694249749980a5194cd7f657bab1412_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d694249749980a5194cd7f657bab1412_JaffaCakes118
Size

651KB
MD5

d694249749980a5194cd7f657bab1412
SHA1

8f430eefb286a8dce3d6224a1a3c929cc151f7e7
SHA256

78f7fd3136613f12eee80f7595212541301d8f18687046f294883adfb159fa4a
SHA512

a3dc4475c67d45e0cc1984af07f05968ebed184d26831503032b5b0b4caf5ef14649069cf69caf5a4c9b11657ef9a3d61f34759fc77563eec9fbb9dc3c754d75
SSDEEP

12288:J7UHJq+jiLpsK7mBKTfOnGrBlH0mC3Y2fGO8nqggvuSLSc24UhhfkqTJrle:VUYZ1t7LTGGj83YT+GCWcEk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d694249749980a5194cd7f657bab1412_JaffaCakes118

Files

d694249749980a5194cd7f657bab1412_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 650KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 142B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ