f8b80b684a426df61d8b673471f808d5_JaffaCakes118 | Triage

Sharing

General

Target

f8b80b684a426df61d8b673471f808d5_JaffaCakes118
Size

340KB
MD5

f8b80b684a426df61d8b673471f808d5
SHA1

2035c8d4ecc43dbeb4cf9952fc66970f01fb3edd
SHA256

acc1283fdd8eb6fc76069a30db6f082461fe87bc470cfc6fda0873c08f99ba13
SHA512

ca13c6feba322004801b7258db35f5769fe26a0c19614b379734d97bf3d56bff45023e7b7f718778b8a804c6c39586c9194d82166f0b6c353707d5591cc0b0e4
SSDEEP

6144:979SGCLa+LkpKcyAdYrNtc0q+ISGJsF3Kx+9Vo67nMSEvrHnqfh18Sch0UP3Uf7G:h9dCmYkpPy/g0q+3GJsFpu67nMPvDqpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ Delivery 3 Stones Excel.exe

Files

f8b80b684a426df61d8b673471f808d5_JaffaCakes118
.rar
RFQ Delivery 3 Stones Excel.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ