2c3c1c58cefc1bbbfb17450aea3f2608_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c3c1c58cefc1bbbfb17450aea3f2608_JaffaCakes118
Size

83KB
MD5

2c3c1c58cefc1bbbfb17450aea3f2608
SHA1

496411f7d05442ca1c037500dd70a9a7a623c8f0
SHA256

9643bd0ea26dfbe3e6d1235fbd7398dde010242c96c98a7b3823c8a9c265d5fa
SHA512

caf7afc9855b8d95f61ba5b828186b2624dccdd14b0d233889d62f81d19beb754a8ae5aea80d8f87a0a2f5366b2fc83a2a38adb4c6ef63da14a103af8e0a9bf7
SSDEEP

1536:JoR1a+8JLBPaB+H9Risx6aTknp1VIGQUp7bY9lD0HoLrGLQ5TmXQ:JoRE+QBCsX8Fnp1VPp7bm0HIcQ5TWQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pagavista.exe

Files

2c3c1c58cefc1bbbfb17450aea3f2608_JaffaCakes118
.zip
pagavista.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ