64b9d761cfb1d3e60b4d957f69b5f710_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64b9d761cfb1d3e60b4d957f69b5f710_JaffaCakes118
Size

726KB
MD5

64b9d761cfb1d3e60b4d957f69b5f710
SHA1

9fd00ec044b176f6f5c534543282bdf951b46ed2
SHA256

7ecc9941dc5727f1e39345a4b4a9926d201edf5e8e58bf0faa5b9c07065c37d7
SHA512

556b941178ea1257c6369b4201a399adfebb1aa06b14fb83655499c6627840a97797cfe511cbcea20acd6fe1cc841a70589c4e6e4eb72fabe1c911b51439f66e
SSDEEP

12288:I7zPxgWUdn2anaUrSpuymYUXoWY2jtLacn2kLK4g5bKZLarqUX3A+V:I7zybdnNjSujBe2jtLH2E6GZLUqP+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/alexacha.exe

Files

64b9d761cfb1d3e60b4d957f69b5f710_JaffaCakes118
.rar
alexacha.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url