2a48dc2ceab5d7c554ef414aded3a225_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a48dc2ceab5d7c554ef414aded3a225_JaffaCakes118
Size

491KB
MD5

2a48dc2ceab5d7c554ef414aded3a225
SHA1

b21248935aaa513feebf1158a1b8bb32c8d2f767
SHA256

d3a520d68ed4630ce9b83ce0c88b468db592f7b18ef3f1e927b4a81447abd07f
SHA512

51ce4a540d83dbde3444c689e11e11729201a7586ebe2772b5466d3fe467ac710195199ab021d0f647d2e1038ca250a02929b96221fea66a0ac06a8f89b15d34
SSDEEP

12288:Iz4aXtul97e+fge7L8O9rySiarY89/FwQAMo:FWAzaGn8O9ehI7SQo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PowerMicYahaven.exe

Files

2a48dc2ceab5d7c554ef414aded3a225_JaffaCakes118
.zip
PowerMicYahaven.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ