29822b75cc840af44d8f38843381dbf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29822b75cc840af44d8f38843381dbf9_JaffaCakes118
Size

393KB
MD5

29822b75cc840af44d8f38843381dbf9
SHA1

1e2fdd0cbb6110cb2f6985489a666adb6bfceceb
SHA256

e5112d6fd43588318dbee9141ebec9b733d1d3fbf52c072e36c6e11a191ac7d8
SHA512

77b85ebd405d51584d1e0b44fd980a64f8cd740ad1f700ef6cde543780e37cb4707b83c4f4188711f6862c87ba4b72a6c877e8294cee48081a8af9b5178f4129
SSDEEP

6144:MB8KZHR883qIgABUtma73HhiMNZH/HB8m/86kzvKRy/QBh5W1L4VFqvscw1FgJW1:AJ3dRgTpbfxUFzKRyIz5W14a+1Fg/JVe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29822b75cc840af44d8f38843381dbf9_JaffaCakes118

Files

29822b75cc840af44d8f38843381dbf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 392KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE