7a79551140a13896a2c933d0407adbe5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a79551140a13896a2c933d0407adbe5_JaffaCakes118
Size

205KB
MD5

7a79551140a13896a2c933d0407adbe5
SHA1

1c4e06e5e9569c6556970d146a4d30c56e6863f8
SHA256

db69b730b09a7939368f1acd051554ba01c1f88f5b8d81aa47d481ae053562e7
SHA512

bf7628f3f3e2a449bba2ea67d5834f6772e1945ee4c44e33a0464c04155c9f2b6b3b5eb6da2ddd2c9ac0b7989a109a495fdb521366eb9ca30589a20638fe5694
SSDEEP

6144:Kg+bOjKujYDM8li+eh7EpFpI2o/++hSKJ3aPO7:KA2wSDG0C1v4Pk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PenSoft.Payroll.Plus.2007.v3.07.0310.Incl.Keymaker-ARN/Keymaker/Keymaker.exe

Files

7a79551140a13896a2c933d0407adbe5_JaffaCakes118
.zip
PenSoft.Payroll.Plus.2007.v3.07.0310.Incl.Keymaker-ARN/Keymaker/Keymaker.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

packerBY
Size: - Virtual size: 519KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PenSoft.Payroll.Plus.2007.v3.07.0310.Incl.Keymaker-ARN/arn.nfo
PenSoft.Payroll.Plus.2007.v3.07.0310.Incl.Keymaker-ARN/file_id.diz
keygen.nfo