13397022729c394ea827e9c3cb969571_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13397022729c394ea827e9c3cb969571_JaffaCakes118
Size

544KB
MD5

13397022729c394ea827e9c3cb969571
SHA1

caab17e09e6a5c2d15ab1bb2100f2ec018b073e8
SHA256

e89bb7b8b52df492b7bb1db62496d9c67a58dec74ada069e7ef7e411bef33a11
SHA512

740c38f21d7efd3f4a19aaa89af559d7ba8f226325e72126e10d700c44798f5960f5af1de2588ac36514287a191c600b905167ab929cf5263a91dfde9ce53bb1
SSDEEP

6144:rus03AGKkF+Af/a4d4PZ8Mx48m9YMpP1Fgvf:Ks+AG/QAfCzx8a48GYeFgvf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13397022729c394ea827e9c3cb969571_JaffaCakes118

Files

13397022729c394ea827e9c3cb969571_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE