e8fbd3d1074a1ac61d1af42a097338de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8fbd3d1074a1ac61d1af42a097338de_JaffaCakes118
Size

885KB
MD5

e8fbd3d1074a1ac61d1af42a097338de
SHA1

a4e94d5bee0f2e28f506666920d6d59832357956
SHA256

340321eca60dce370a0a6a99f7de606d1b4950bc435902d10b7b67ab8794c150
SHA512

e3d4b2ac8977075127dd78ee3555a3271e598ca40b26c64ea853ea2ae95cf34730d87345d65e2f2ad210c8b1806c73b73961e5dd71903be1c1afcb8158ab20eb
SSDEEP

24576:sL6biWAIe+XsfZd5QqBY09BwDKQb/dMatZs:jwIesqZdaqBYqgKa/dMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/蛤蟆辅助免费版.exe

Files

e8fbd3d1074a1ac61d1af42a097338de_JaffaCakes118
.rar
155绿色软件站.url
.url
蛤蟆辅助免费版.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 986KB - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
防SX非法补丁.reg