4c9b06e9d1a51af168e652c69266b639_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9b06e9d1a51af168e652c69266b639_JaffaCakes118
Size

273KB
MD5

4c9b06e9d1a51af168e652c69266b639
SHA1

7212e648e71d7284ce71ca1632f163d4c3757f25
SHA256

93280d1212cf302f1b30f9bb70d897bd05e52e7fd7841334bd95d733ff73bdd4
SHA512

22babc3aa56d2855f71fde4ebfa2f3b193427809e4c781361511589f2229e3ef6e5916dfff2992248e0af17166da24fd071869687592236b3e01e2ab976e0771
SSDEEP

6144:Th/bZ7yh5Xh8htpXt8YL71IakCQazXjXqm0en:Th/bZm/x8vpXtr7ubon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/foto.01.02.2012.jpg.scr

Files

4c9b06e9d1a51af168e652c69266b639_JaffaCakes118
.zip
foto.01.02.2012.jpg.scr
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
license.rtf