0a133dc64ddb7579aaafb844153eebd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a133dc64ddb7579aaafb844153eebd7_JaffaCakes118
Size

1.6MB
MD5

0a133dc64ddb7579aaafb844153eebd7
SHA1

2352378351893ab662ac84befa2c337ae9eddb20
SHA256

7582613aea473b1a36499f196b8b7bfd5b007a9c2bdeb69bbbe168396813e257
SHA512

e00206b99dbd0ac68d388851adafb57bd0cc0deb1dd2deedecd6c13a88ce640035eee036cbc59c00103b16306591348265a25f3801ac36863aec64a6866ec718
SSDEEP

49152:gyXPLv6jmTAS5n5olR/sCXiZ6URxKEc/iJV:gyXP7XbSR0Cy0uYEc/iJV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HAP_AAA_LOGO_2008_v2.1_BWW/alogo.exe

Files

0a133dc64ddb7579aaafb844153eebd7_JaffaCakes118
.rar
HAP_AAA_LOGO_2008_v2.1_BWW/alogo.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 555KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 82KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 29KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 338KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 367KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HAP_AAA_LOGO_2008_v2.1_BWW/alogo.exe.manifest
.xml