f2fe0d1b8e12d62a1132ce589b119342_JaffaCakes118 | Triage

Sharing

General

Target

f2fe0d1b8e12d62a1132ce589b119342_JaffaCakes118
Size

91KB
MD5

f2fe0d1b8e12d62a1132ce589b119342
SHA1

72d71b1ab72df78fc8e30c164cbc0a9d372c5c55
SHA256

6cac962e366893fc3fa8d366c5c16dc2fa13af45a91492bdd26acd0d9076e096
SHA512

a62bb31692e568732decadc9445521f4d0909d2cc59751c89d139381fa3942a69cad4ad4c4cdf0cd988009e0480d23db7551d298f08e0be094f8ea10c72c8a46
SSDEEP

1536:nQwHfvMS0xcGxFyhQkrnb1Mq9WbJOnMA+txGFCr6cXp4xkPdh2B3SeyJ:nnHXMpxcGxFyhQ0bOqYuc6c7P6cJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RUSSKAYA-GOLAYA.exe

Files

f2fe0d1b8e12d62a1132ce589b119342_JaffaCakes118
.zip
RUSSKAYA-GOLAYA.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ