07a07fc8b19389e39c48ecbfb137119d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07a07fc8b19389e39c48ecbfb137119d_JaffaCakes118
Size

763KB
MD5

07a07fc8b19389e39c48ecbfb137119d
SHA1

4c1eb49c1407cb95a4ba96be7fea335a3bd8f916
SHA256

319b5eb2cad7b9129ba3e5c267dfc62a6875b305e440496d56c68cc74c364065
SHA512

fd36c67140d8dc10ec22145678d963960822bdfd7d923e2b4447189c1f537e7ad6d289350a2059f296ccbcb8daaaeee100f21c2eb0b1cafd0dbf0330a586c121
SSDEEP

12288:f6xrRbE2etiOzWQG/yYYWU7vM0gCapaFIgSrucuXRdzdTM3nAB2JStJI2fe+Ow4e:f6xdLBOz6/yM8WaCgSrucMOnAkSDfeor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3D Space Christmas.scr

Files

07a07fc8b19389e39c48ecbfb137119d_JaffaCakes118
.zip
3D Space Christmas.scr
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 860KB - Virtual size: 864KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
File_id.diz
keygen.nfo
s0m.nfo