6f2e87b2810e0ce0f535e909dafe7d64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f2e87b2810e0ce0f535e909dafe7d64_JaffaCakes118
Size

702KB
MD5

6f2e87b2810e0ce0f535e909dafe7d64
SHA1

9a6da0346383d348cd0aeb90d9a33e875a61a28d
SHA256

2543d1a6bef3703d7eb28e0d94b4fe63a82d0a0f8f6123efd7f74c7133ade6f9
SHA512

11e3ce0e6739c49a8e666f192b6a63cbcbfcec91e5f4b535807f64f2700e1790d8d499f11062c01111b32cf47ddbcad2929ab5e72527be9a405e2ee0c2390f41
SSDEEP

12288:19K6homp3vocdqmtFDRe6JWRZ4LKm3cNscdbzowRdRaOs8yhVu8KhD4r2ping51f:6CAc8aFePYKBNewrRNOhfKh0PnZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Kaspersky.Trial.Resetter.2.3.0.0/Resetter.exe

Files

6f2e87b2810e0ce0f535e909dafe7d64_JaffaCakes118
.zip
Kaspersky.Trial.Resetter.2.3.0.0/Readme.txt
Kaspersky.Trial.Resetter.2.3.0.0/Resetter.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ