30b15e9e26ceed02c1a3238387b156f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30b15e9e26ceed02c1a3238387b156f3_JaffaCakes118
Size

762KB
MD5

30b15e9e26ceed02c1a3238387b156f3
SHA1

7fc00ef585c6f98ecdd0b1ad15546072be7f4d4a
SHA256

063cf28ab4e00744368c6a4426b4c5d95e48ecf4542b8597bd006f4e1a79294b
SHA512

40add80865dc1d455a11246c2e87845b089be226fe335b48b740cf89da462565c9d3f3dc2389ef27cb91586631e0fe9938f0b9d00e6b4e50df37784ea9a56e23
SSDEEP

6144:Al5rxCfZaTI42X/iKBCIMeM2xIiUfGOKYdYt0dinQ1fSjcuf+ZmrQ9m4T:AzNCfZJXX/iuBzOxmnQlHmrQ9p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30b15e9e26ceed02c1a3238387b156f3_JaffaCakes118

Files

30b15e9e26ceed02c1a3238387b156f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 74KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE