7a582a26b867e0dd6cd4719cac396ebe_JaffaCakes118 | Triage

Sharing

General

Target

7a582a26b867e0dd6cd4719cac396ebe_JaffaCakes118
Size

339KB
MD5

7a582a26b867e0dd6cd4719cac396ebe
SHA1

f9a49f2cc394555827d98c72db34b48ac79b5276
SHA256

ea7e74d01bd206d44c8967a88846c3b29e3d8960925ac130b5b9adbe4643e57c
SHA512

10a4a3d6a8c96fc19f619a2f5a0f59d805592f06158f9e1f39978e9757b0f6aac4c76f9aa8fa32073ed87ebf9f159a6f4443607f883dfcf833126ef6775f8f10
SSDEEP

6144:BMcjo/tffJ6FmNgycgCSoS5iz+GFAyiIQW6aLl0/QqOuZQ3RoHQo/:BMcgF4FmKycgCh+GFf1l2QqO3WHF/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack001/Shukusen/ShukuSen.exe

Files

7a582a26b867e0dd6cd4719cac396ebe_JaffaCakes118
.zip
Shukusen/ShukuSen.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 538KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Shukusen/help/help.html
.html
Shukusen/help/screen000.gif