f0131a3daf526098f6dba102e343f934_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0131a3daf526098f6dba102e343f934_JaffaCakes118
Size

56KB
MD5

f0131a3daf526098f6dba102e343f934
SHA1

8247ff5879442439141bf89ad7c46f2f3d34c72a
SHA256

210d37afd04fe920221ea0111946b303c83f42de1e879a41610de493573277f5
SHA512

dbf4ad4342dee64f901f14cd99a0e4cf8affe226471a4303242836f02500e3c4807f3e3a786af38f83d951244384be9c576c04acdf58fc622c3896e71361c787
SSDEEP

768:xeqH9cSPd50FSdP60vjff+FB60T9X6vLx+K5+Rxz1rDhS/7VwmlYfVWc2HTEw8M8:geTbT4F00T9s611HhuzlYf0l5dciZe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/n32upgen/n32upgen.exe

Files

f0131a3daf526098f6dba102e343f934_JaffaCakes118
.zip
n32upgen/n32upgen.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 457B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
n32upgen/readme_en.txt
n32upgen/readme_ru.txt