febc4d7a63bb162e4994c987624733d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

febc4d7a63bb162e4994c987624733d9_JaffaCakes118
Size

87KB
MD5

febc4d7a63bb162e4994c987624733d9
SHA1

b8d073ddf3d665836f52814675b34a248a89713a
SHA256

e16f0b7430d2c8e8d27d1a238844100a200b154c910c1d45d0eb9bc6e118477f
SHA512

67ac31a6fe1f5248fc359d536ffe080b9f247d155d27ca10e32b3bbd07f17c8fe78060498b2126cac1fe078f982cbd58990150d80680d0edf18f14c2c2d24320
SSDEEP

1536:Kvg1WKQmK74VzprUxe7kvLSPkIJNE9sq0Qs07tta3wcpFFtSJJr5pNLKp:KvgEL7Yo4PkH9sIbr+wcJtSJTpNLKp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PHOTO-DEVOCHKA.exe

Files

febc4d7a63bb162e4994c987624733d9_JaffaCakes118
.zip
PHOTO-DEVOCHKA.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ