5ac8d590bf039b0e10d781ae28d085fa_JaffaCakes118 | Triage

Sharing

General

Target

5ac8d590bf039b0e10d781ae28d085fa_JaffaCakes118
Size

15.2MB
MD5

5ac8d590bf039b0e10d781ae28d085fa
SHA1

6078137355dd307f42038500bd12da0d164082d8
SHA256

cc1ed3f7a7eb382b5253fd4d023fcd63a9e2f3d973dc92c3287f68833c5d6f53
SHA512

648399b07a40bfaa1a202f6c3c4395d29a34b1af0bc1611dc597921432ffc45a1938fb1e0fe36525a9c0cc375fde06a2ff270842f6ce87a4648ef781be415d3a
SSDEEP

393216:zyhczdgR9GKcKSzMFNs9xDQtedEM9cYhT9IbN+cFYFThtNfzOWX:/zdgR9VcKs9xDAM2YhT9bcI9tN6WX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/yfalbum.exe

Files

5ac8d590bf039b0e10d781ae28d085fa_JaffaCakes118
.rar
yfalbum.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url