db752542e3d23bc17525caaba6873923_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db752542e3d23bc17525caaba6873923_JaffaCakes118
Size

149KB
MD5

db752542e3d23bc17525caaba6873923
SHA1

c78fb4e12d07a1d273e7c0af02681a68311d3269
SHA256

5b24fc80efe5446e43017473aba8622a893bd47f96f1634866df7c21d4b512fe
SHA512

28895f8ba472dde1b1dc58b455b395ab4339be6a0ef41b16470343212d241148011a422b3efd5a5b8bb2fcbcacbca5b1905abc7cb5a320135d7c266c8564cf15
SSDEEP

3072:eaFoe4jKy1rgKpD4HNIcLKyqeiLO1B3Q6g:eaFopjKspD+icLKyqrMY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Picture17.JPG_www.facebook.com

Files

db752542e3d23bc17525caaba6873923_JaffaCakes118
.zip
Picture17.JPG_www.facebook.com
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 424B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 26B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ