eb48bd7d4a4fd9190f656bbbb0990404_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb48bd7d4a4fd9190f656bbbb0990404_JaffaCakes118
Size

4.7MB
MD5

eb48bd7d4a4fd9190f656bbbb0990404
SHA1

763ea3fe0d6d7de59c8dccdbbb61200f73ff4933
SHA256

05cfe46b583bc0b663b2af7197751f017948a50d9cd3f50358522ebe3a48a111
SHA512

97824123f76ad2a9bc8ba387a47880d57409be45194cdd566958bac4a80e97bae9c21c9569afd641985f5acb4705c552d486838be6fd9322dff2da0eff02e339
SSDEEP

98304:OMN5tVVwNHZsVPfCHaicOYF+NbqRQkbyZbuFuMtJ6fUgVtVZRD:tV4ZUPf4dDNbqCPJuFNtJcXtVD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb48bd7d4a4fd9190f656bbbb0990404_JaffaCakes118

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

eb48bd7d4a4fd9190f656bbbb0990404_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE