a96c96e7236cf5bb97acf5a03f18945a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a96c96e7236cf5bb97acf5a03f18945a_JaffaCakes118
Size

5.8MB
MD5

a96c96e7236cf5bb97acf5a03f18945a
SHA1

e45bf78103c301724954828aeb2491e503e4bbc1
SHA256

5d538ff938e2d3aaa986b3e389336c06c5159374ac5c312e13cd49ce55300469
SHA512

1a5be03c9b900cf37de54d55e31d822402d038c0b3af69e3c32ab45eb2c4199d06e0fbf65b23e4381de57e6e21a93545dcd471e8621c02691fad3082b466b942
SSDEEP

98304:0yVRDApj6LRAOcUsjrEULI/pqTASxODL1ew8f9bO/HpnK9PfmRgHR9kCCiD1mdf:bpAxDDrxLQcsSxikw145m+4qct

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/rtesetup.exe

Files

a96c96e7236cf5bb97acf5a03f18945a_JaffaCakes118
.rar
rtesetup.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url