ee921b8707f3b9c2fb99012f864e4a3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee921b8707f3b9c2fb99012f864e4a3c_JaffaCakes118
Size

604KB
MD5

ee921b8707f3b9c2fb99012f864e4a3c
SHA1

b266412cb1374313996527e2e4c4cc7ed087df2b
SHA256

03de217faeeee6bfdc31e4870b4674b317925de59a33a32ecde215f168918a60
SHA512

ff4436b70c2cabc3db89640ac00d328a058bd7fb0c84a6e397e178f63fe2b255c6bf221c65073a0ce6424c084d82580cc1572864948e66832ba81988e8918bb3
SSDEEP

12288:R8MDtCi7NFlZnNqZ9xGrLpZ0ZHEqtgb0U:R7plNFgxG5eZngb0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee921b8707f3b9c2fb99012f864e4a3c_JaffaCakes118

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

ee921b8707f3b9c2fb99012f864e4a3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1020B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 8B - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ