63ac89375763371b022cded1d362ee30_JaffaCakes118 | Triage

Sharing

General

Target

63ac89375763371b022cded1d362ee30_JaffaCakes118
Size

297KB
MD5

63ac89375763371b022cded1d362ee30
SHA1

acf982507203ed72d1c87cf9bea55bc397c7e0f4
SHA256

bfd7dca26413c18a37c6b072cd956aa998324d1fcd4d017857b853ff4557570e
SHA512

d9a129e662dda82e249c80cef4ceda76a2c5f757b354ef242e5a3cefac838e447481b9b3ab0be101249b52622ea78c07d3b849a2b7098649d75fb1876d787f74
SSDEEP

6144:SDK9gnNCOS0xaWZOI4903q+t1FybG70aZTuW371c0f:CdnNCOS0xZAP03qWFyi4aZSEBcK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack001/yourcrypted_pdf.exe

Files

63ac89375763371b022cded1d362ee30_JaffaCakes118
.rar
yourcrypted_pdf.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ