fd74c61eda0434269da5624f3659b235_JaffaCakes118 | Triage

Sharing

General

Target

fd74c61eda0434269da5624f3659b235_JaffaCakes118
Size

756KB
MD5

fd74c61eda0434269da5624f3659b235
SHA1

91fd190d5c23ef62876cbc166934ead908317b7c
SHA256

655c67e665ce83295be8a9aca6b81a71cf90d3e80902a3d1b7b929f658706521
SHA512

283da6ae73284b611b2200012e96b258efff45f8811500c750d5d6eb902bfaaaa96f5f0b976149a538d231b441b523305f288baab014f6ab6a877834cc27721f
SSDEEP

12288:tRmJ34UqACPQoKwICzPhVifZWFuGZkTP2bjmgqLMDburpEau8n:t0B4U+Qo5Ph4ZWkQ5egqLC4Wf2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Scan 2020227 pdf.exe

Files

fd74c61eda0434269da5624f3659b235_JaffaCakes118
.iso
out.iso
.iso
Scan 2020227 pdf.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ