760712d448bec52f8e3a530ab769f25d_JaffaCakes118 | Triage

Sharing

General

Target

760712d448bec52f8e3a530ab769f25d_JaffaCakes118
Size

452KB
MD5

760712d448bec52f8e3a530ab769f25d
SHA1

072d3c2491b829943aabcabe9e7225ee58d43685
SHA256

43cff6abc2bd3abed6c3e604daf21efb28ea312a87684e0a2d5f590a44086494
SHA512

3b9edf1abb58a0ac48dc18d296243e3bae26fc73f2b13ab07e02d8f066e4788d58de86ceddf8e2b6a6eac2a09584af923729c18e2f77cb19958b7ad168d8d3fa
SSDEEP

12288:/0Y/FcbTIEQg7Dd+NdqYESCGSyDPY3fZ9mu21:j/FcdQg7DgdJAGSyDPcj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/wpp/Setup.exe

Files

760712d448bec52f8e3a530ab769f25d_JaffaCakes118
.rar
wpp/Setup.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ