JaffaCakes118_2658ffbd95c2d5a3b00cb00ef8c9f8db | Triage

Sharing

General

Target

JaffaCakes118_2658ffbd95c2d5a3b00cb00ef8c9f8db
Size

802KB
MD5

2658ffbd95c2d5a3b00cb00ef8c9f8db
SHA1

1f8563b04882ee5bda7cdc2e26b828d767b8dc07
SHA256

cdc703258020f867647dd2aaa2fdb613436a0e5774770137da4b04dc5a008cc6
SHA512

ace54dc4acc236c5de6738157aec2263ce18ace291a6c445c688692d5f414a5866b0a601534dc3e66f4ca6a72a1b6ddcbe85c688f84facb3323c5402f86df3fb
SSDEEP

24576:Yxqo63OUoEpA7uArbExj32WezCVRWD00/EB:0wODuArbExb2CVRW/EB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_2658ffbd95c2d5a3b00cb00ef8c9f8db

Files

JaffaCakes118_2658ffbd95c2d5a3b00cb00ef8c9f8db
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.itext
Size: 5KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 617.0MB

.nvpynu
Size: 511KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ