eae3ad9df5afd3e8d6df0304c40a9211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eae3ad9df5afd3e8d6df0304c40a9211_JaffaCakes118
Size

335KB
MD5

eae3ad9df5afd3e8d6df0304c40a9211
SHA1

a4de06d03707cbfda489970b7ebc3a94490b951f
SHA256

189b427ab8bae83b202eb39f60d58ed96e579f63dc4acb96d21a749017c13b9d
SHA512

d9d9811ecbddc5553989504f7498e23309dc3f075ce802594df9e53ac805b95432410e8e2d76ca9f30a32e7c0a75031849d7c01ba588597b9a44acf294444d09
SSDEEP

6144:miWFZtvdBTQVK29f/b+PhNaLMG0FUesp0Bnoog7FoIHf3fcy1bgn3+oaA2JDc121:S7tv/mK29fDaG0RsWnKJo0ffcy1bYPp5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eae3ad9df5afd3e8d6df0304c40a9211_JaffaCakes118

Files

eae3ad9df5afd3e8d6df0304c40a9211_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 333KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yvs
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE