6f81e55e270017fb490992f115e6d643_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f81e55e270017fb490992f115e6d643_JaffaCakes118
Size

1.9MB
MD5

6f81e55e270017fb490992f115e6d643
SHA1

ec94504849dfdda9cfa59349d1fa2571ce701977
SHA256

8c836a00a7aebb75cd3eecb0c759f5be769995d9669abdff390b2e2467fdb281
SHA512

378fd6915b73e640128e05e192c36efc8004569d09327b3363b4dfda7ac0d5f5734def59637b5eae007242111c6612197fbfbbd7f5937694d0d4de5b11926fb1
SSDEEP

49152:HpyNJX4XSR9ETzupY+d6CQm8SITYqJDT8t6ZP36i:HpgMSgTNcQm8SUpItO3P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/hymm.exe

Files

6f81e55e270017fb490992f115e6d643_JaffaCakes118
.rar
hymm.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url