d0cc537a8757f92871616a49bc25c78c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0cc537a8757f92871616a49bc25c78c_JaffaCakes118
Size

268KB
MD5

d0cc537a8757f92871616a49bc25c78c
SHA1

764d51d28eda3b7e2cfc2ea82a32f2380989778f
SHA256

c0a95ab53126be5a986bf445e3b7e0dfdc8e6fb76d9f71c37728024838e39da0
SHA512

605885a050f8c5431d45c546294e58585b713f5d8d81d53ac7f1e72bfd954aff5f527bb9fd592db1cd6629ec0b423accb4b9d56ef2e6046f1be8da5997c97550
SSDEEP

6144:hR68/VJfp+d980LaB5pbpRzsLB/UH1cc5mclS:LBvAaB5vRzsB/M1vmZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Intel.Integrated.Performance.Primitives.v5.3.045.MACOSX-Lz0/crack/licgen.exe

Files

d0cc537a8757f92871616a49bc25c78c_JaffaCakes118
.zip
Intel.Integrated.Performance.Primitives.v5.3.045.MACOSX-Lz0/Lz0.nfo
Intel.Integrated.Performance.Primitives.v5.3.045.MACOSX-Lz0/crack/licgen.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 265KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Intel.Integrated.Performance.Primitives.v5.3.045.MACOSX-Lz0/file_id.diz
keygen.nfo