91f95ba1a40ad881f8bc400ef2fe49e8_JaffaCakes118 | Triage

Sharing

General

Target

91f95ba1a40ad881f8bc400ef2fe49e8_JaffaCakes118
Size

2.0MB
MD5

91f95ba1a40ad881f8bc400ef2fe49e8
SHA1

a9de3ae051b20cf3ef55b5beaaef5a78b6648c7e
SHA256

4c1c0a3b89983817779583811add6aefe34c0c1e8af0bc7de9c98efb94c01fd1
SHA512

74f737dc560a5b7caf79e2c602b58c2f6d5dd7ff7bdf08969ac0742f9d259c48d7ebcd110e201c46fa47f5368958aadf0b991ec8140b5e783217bbc166504a7c
SSDEEP

49152:Iu+QzE75Y4KYCZmAAMJUH6Q504ysMiqV4OhIiu0Ju3ZA3:FVzEdEnLA+UpqVxXSZA3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/setup.exe

Files

91f95ba1a40ad881f8bc400ef2fe49e8_JaffaCakes118
.rar
setup.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url