578241edf930d5d5ea9e4473a1d7a281_JaffaCakes118 | Triage

Sharing

General

Target

578241edf930d5d5ea9e4473a1d7a281_JaffaCakes118
Size

347KB
MD5

578241edf930d5d5ea9e4473a1d7a281
SHA1

564478e5272310c6b23e04c2aca02541aaf7d0ca
SHA256

a28c5dec9756b7671b1d086b3798ec49653a9425bd6bca936fa85aa01476f25f
SHA512

5386a17b37ee11ce73a6873318279e3f3019a923cfb3315e0cbdfaa71e00238519922bb49233a06a8f839896d8b076c0472730344b9b1fd5bfad626cd16a2dc7
SSDEEP

6144:CCCaNjoI94Zq6HxY4cTmQt4E+d/0xwOrlE0nn7e9I5o3p6t5KlOUyPMB9KS/Rw7+:cAd4jHxStz+d/0xbrpn7e9Iu6tyQMdJ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INQUIRY.exe

Files

578241edf930d5d5ea9e4473a1d7a281_JaffaCakes118
.rar
INQUIRY.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ