6abe6cd7e292dd9c6246b1dc539b17f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6abe6cd7e292dd9c6246b1dc539b17f0_JaffaCakes118
Size

1.7MB
MD5

6abe6cd7e292dd9c6246b1dc539b17f0
SHA1

d7dbe34765eaa1ece2443a13b8dad66a2bafd14d
SHA256

4daf80df3572a26d8822ca1aa70353f41aebe5a6f16fa0f96a5e4188a96d8522
SHA512

3956c7aa0b7a58fc580aaac3d0c56dbcbb63009081f2c73bdfa6215a0b278e4c61aa1245a6e008f738fb88c2680e55841a97f5feb4f3dd35c02a5ffa1bc36c69
SSDEEP

24576:wixnlJAh5zX+/8xB1Ic97ZOt0ak9SSI3HkRzLYMXFrt/6GLSWbbDCbcbJmh:wknlJQ5i/8xB1Ic9WOKHk2M196+nt9mh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pcrsetup.exe

Files

6abe6cd7e292dd9c6246b1dc539b17f0_JaffaCakes118
.rar
pcrsetup.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url