04d7b7524333d9ef6f8d4a13f74ba942_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04d7b7524333d9ef6f8d4a13f74ba942_JaffaCakes118
Size

2.3MB
MD5

04d7b7524333d9ef6f8d4a13f74ba942
SHA1

0ee402a336099d9c5139e131790e759df64af276
SHA256

f8585087f432f9cf36319363f4bef794c478252fbb7eb61afc80eed5e1eed738
SHA512

bc9c78777e06ad7d5dde99010057923171763a3b38763375d7d8bb1fb898470d48adc1c6734d54977679716c15b0ae0b282a0f1a86d4cd24bcf86b484564ab9b
SSDEEP

49152:26iwKkiXNheXyzzsu5sTRtniozjTCMxueG0GQdMOZ2RofNZI2neISs:8wKkiP4yvsztiy3/JDTNxeIB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/jwws_v1.2.0.0.exe

Files

04d7b7524333d9ef6f8d4a13f74ba942_JaffaCakes118
.zip
Readme-说明.html
.html
jwws_v1.2.0.0.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
memo.txt
pcsoft-下载站.url
.url