d12f74454ea0bdb1640457345d2a880c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d12f74454ea0bdb1640457345d2a880c_JaffaCakes118
Size

857KB
MD5

d12f74454ea0bdb1640457345d2a880c
SHA1

27ff9ab86d04b97c98f63376f3866e1577f9352f
SHA256

91f6688ff0d4a5fb1cf781970cabb9f410e74685a7f798e7a0c0abd7d88018b4
SHA512

7a96b68197c26e8d0f68543cb2be4ec6f3d347738f994236653be84f518baa567514c1e01d1d5c1b4348a99a7e6f1b03b6658cf946637cb572b3aff4426f91a6
SSDEEP

24576:9Kq6rOKm0WdfaZfxn/f8X6E1/lung+gFHgTfAIZMo:R6iKAdfavnn8PdygNHgTfCo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AlterJig-v8.293/setup.exe

Files

d12f74454ea0bdb1640457345d2a880c_JaffaCakes118
.rar
AlterJig-v8.293/FILE_ID.DIZ
AlterJig-v8.293/README.TXT
AlterJig-v8.293/setup.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlterJig-v8.293/新云软件.url
.url