fedc8c16b355f117a74b82f86f3ee32b_JaffaCakes118 | Triage

Sharing

General

Target

fedc8c16b355f117a74b82f86f3ee32b_JaffaCakes118
Size

5.9MB
MD5

fedc8c16b355f117a74b82f86f3ee32b
SHA1

23fe3370afeb3dd23a8cea4d0f442cfb78210507
SHA256

b00f8a4cbcf51e2e5f57a11aeb492c2d3e94d5615b8459701a730bca374708cb
SHA512

a150ca1583aa2f70f344910b6f6296d075492b24e7e884c5477e2b7a1d5b7f4af60292f9cd34a943570115e9f7bae45fd8271690ae0161238b4acc4ad7e7cc20
SSDEEP

98304:2DpOeFrhuwUJTY1hsbhd6brRNv3hbeZo/eyXDjm2vVSbJzwy9s/57bUlyR8a45lH:2d7FZF6j6brHvhKPyxMCyK/xUlycjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/jv16pt_setup_hb.exe

Files

fedc8c16b355f117a74b82f86f3ee32b_JaffaCakes118
.rar
jv16pt_setup_hb.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url