901c5e013829bc00d1c4cb5a3966c562_JaffaCakes118 | Triage

Sharing

General

Target

901c5e013829bc00d1c4cb5a3966c562_JaffaCakes118
Size

154KB
MD5

901c5e013829bc00d1c4cb5a3966c562
SHA1

c2d9c7a38978322f0100e5236c0a80c14e7a95fa
SHA256

2ec9f0fe0e0e13b03e790d3309d396f18753174e58ead0ca260929762b47a193
SHA512

c54e6453550f6b4f104328a057fbb841c1980a6342a804f36c993ec4f9abb3ae06a7018d73d37a26be4c0f8909565772688421f36bed63d4defe51e1c502ac70
SSDEEP

3072:283uh6vB+5fOwe8hN+1+NUHSKLfCaCXvK8Ia3YISP6WL:w8UfOweYcVHSUCaEvK8IagP7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/hiew32demo.exe

Files

901c5e013829bc00d1c4cb5a3966c562_JaffaCakes118
.zip
hiew.xlt
hiew32demo.asc
hiew32demo.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hiew32demo.hlp
hiew32demo.txt
hiew_en.txt
hiew_ru.txt
register.ru
register.txt
sen.asc