2aed8dbc2e6d698bdce2ef14d8380980_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aed8dbc2e6d698bdce2ef14d8380980_JaffaCakes118
Size

542KB
MD5

2aed8dbc2e6d698bdce2ef14d8380980
SHA1

2e0abe702a491d03375e9fc627bfa0fa2e309cc4
SHA256

b53b958564b58e7c6d05f435c46d9107a59011d2e5684085e4fcc01f857dab78
SHA512

3d044acd49f671ee640bee97e5a0073b42e67b04b3efbda5449286443787a24eca6b125e0373aa59e0b6574016d9d491f9c54c4d8ab47c5f2ac41cdf5734764d
SSDEEP

12288:D6KhcO4OjGKUpt4YSKW24FCRYAXZ5UrOGPZo4ZD76aLnf3:D6dspUpmYSKsCR3X0rOGPJZD76snf3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aed8dbc2e6d698bdce2ef14d8380980_JaffaCakes118

Files

2aed8dbc2e6d698bdce2ef14d8380980_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 529KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.123110
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE