96ad25d7fb820c888afafd774e6e3b56_JaffaCakes118 | Triage

Sharing

General

Target

96ad25d7fb820c888afafd774e6e3b56_JaffaCakes118
Size

371KB
MD5

96ad25d7fb820c888afafd774e6e3b56
SHA1

c6d06d79260422a385ae58211a0dfa28cfcc1aae
SHA256

20b509fc8c4c2f7d00a64d38a0c9c25af31520d3a4e08039a27ea2f7f1cd6558
SHA512

0491757f96024de22b0feea7eb3df401b7f5e9ca654208373a68271cb66188eb9c1ab6d0470c1ef696ac7698826ee5a23f85f9a9a2fd2d402b899b4c43e1d126
SSDEEP

6144:rwOwGdFntV4zR5JOQ8a6vjXDWp0I4T0N/Hb3vncVV+DkIWtKLcfF71x+6:8O/dFcR7OvvjXkF4WPbEgkIWALct7/V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/playachicas.exe

Files

96ad25d7fb820c888afafd774e6e3b56_JaffaCakes118
.zip
hormiga-org-bromas.txt
playachicas.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 469KB - Virtual size: 469KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ