698d7b1e4c6cf3ff3f1107cd4fe16511_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

698d7b1e4c6cf3ff3f1107cd4fe16511_JaffaCakes118
Size

445KB
MD5

698d7b1e4c6cf3ff3f1107cd4fe16511
SHA1

a5cc49f0b0a310522ecf2ba0d2d9a39c4c066494
SHA256

b8d51236da5af3a463de964d4e93872b9b5f15f365dbab96df7ba7adb8df51ab
SHA512

6b537c246d2d4ce5f6ce8281e670ecb9071092432344d3cf3168da3152690fcde07188f20a18eb3545010586beb5e0880423c4b011185863d81280be8ba8d8af
SSDEEP

6144:YNCNhKYF5UncOCzhyS+KHPb+37dOQCbnJoQHaEE5GYYU2kEeh+si7gcLO3XP1oTt:YENUcOCdyS5ioQa16BL/iMcLgkezA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PangYaHack V.1.exe

Files

698d7b1e4c6cf3ff3f1107cd4fe16511_JaffaCakes118
.rar
PangYaHack V.1.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 467KB - Virtual size: 467KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE