63560d31b86b87cc6567a2848c21137a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63560d31b86b87cc6567a2848c21137a_JaffaCakes118
Size

1.5MB
MD5

63560d31b86b87cc6567a2848c21137a
SHA1

2e827fbcd01c0f3513086914cd21bb0921a328f3
SHA256

af1bb8e5d3196a75dfa2e2ee72327b78f9a86172aac84a7bf389ea69c66c2d57
SHA512

68815acb8c61d7c265f27a2575d4fa1d3580e98b3e0f64225466ab54fd2303c47b9589d33af9271ea22a95d4f0989e99d3cbf52195dac340c214c6b807cac6ff
SSDEEP

24576:gIS6d7VGXNUDGRW2K87LokOQoWXDE0bb86hvJu3oPQEpUWm0Hwwlc9XNs6Dmk:HXdpGXODGEiLo4oGDu6hvWoPdpUaHay8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/F8-Autoliker Installer.exe

Files

63560d31b86b87cc6567a2848c21137a_JaffaCakes118
.rar
F8-Autoliker Installer.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ