b0ff9984949613472aa0aa5a2c5ce540_JaffaCakes118 | Triage

Sharing

General

Target

b0ff9984949613472aa0aa5a2c5ce540_JaffaCakes118
Size

615KB
MD5

b0ff9984949613472aa0aa5a2c5ce540
SHA1

4d19e3efc8960c9508219f5858874389862ce073
SHA256

856c3f81f1319fb6dcaa7729d045fd7b63a966847be32577f6926a64a865ca90
SHA512

d674bd363211e3f0189c78f8d1f62148b6c078dba849e3d3af54335fcef273cc2f83ff6b720f0e05869e973ded26d1e03a7c6137b56cb9c2d5992adecdf33f60
SSDEEP

12288:3r2DT+sRz0bolMYMYb5ZnZl7cwgrWWuaXDACaSp+mNA0zIqW+T81v:3GT+az0ceoPZpc8FID8w+md5TT81v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe

Files

b0ff9984949613472aa0aa5a2c5ce540_JaffaCakes118
.zip
AS.XML
.xml
FILE_ID.DIZ
Readme.txt
Setup.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ