ff21e0b4790e2d6466bcf75d74f1caad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff21e0b4790e2d6466bcf75d74f1caad_JaffaCakes118
Size

107KB
MD5

ff21e0b4790e2d6466bcf75d74f1caad
SHA1

ef7b72b7a9ff7d04870a0809bd5623292a7d76bd
SHA256

3e9b495eac8dfa3923eb0ece448337143df8035d9addde102a555e323bccd9e3
SHA512

34a62e3985efe6f155e1673df3a32cdd539a5607f1862720b67c677fbbbfe8575b764f4049ad93a40f39fe48b4264cd2c646b62cdaa3c7a4be835fa1e3139c3e
SSDEEP

3072:BO9dhLlTfMl7CLmiLhiO3jMVe/O0P06bchu0:4JhiCkO3jMVcP06ohR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-SEXY.exe

Files

ff21e0b4790e2d6466bcf75d74f1caad_JaffaCakes118
.zip
GOLAYA-SEXY.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ