13f0eaef7eb3dafed224b90c6b54f6e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13f0eaef7eb3dafed224b90c6b54f6e0_JaffaCakes118
Size

13KB
MD5

13f0eaef7eb3dafed224b90c6b54f6e0
SHA1

b63d30f984e86f296e98f35a8ff41a8584b59fef
SHA256

aaecbaa70473b4ef89eee8befb0f4c9cea097372f536a691542252aaf86bff5a
SHA512

4b5c9ecd82124b9e20151b2e9270f6ed08862e56c808674ade919124d8302485cdca733845f1e627cc649574dea9f5fdf1e38a9416d5fef5015918c7866778b9
SSDEEP

384:Lhm0oVZFMgntliybPvNEcB6mrW7TlysP53:Lhm0cZFMAliD66FTlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WinZip.10.0.6667.KeyGen.exe

Files

13f0eaef7eb3dafed224b90c6b54f6e0_JaffaCakes118
.rar
WinZip.10.0.6667.KeyGen.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
www.bob.net.ru.url