eb62655ff155ac7aeed15913cf1294d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb62655ff155ac7aeed15913cf1294d4_JaffaCakes118
Size

1.9MB
MD5

eb62655ff155ac7aeed15913cf1294d4
SHA1

28731f163ec8bae341b5e022da2931e29f478ce2
SHA256

6ef2d9fdb823adb40b223acb8e316479fab714c72a263f5db9548af6b2ef7ac5
SHA512

9a356c247d826155ea2c07d420d0385d4696b56e9de24134ee80818744b50cdd6e35b2956b3589bdbde7cee420ec856557d43ad25eb2da52787e7b3031a14110
SSDEEP

49152:h160YREz1O5jYgXhu+oNMd2QPuUjXT+i343OTIq6:TkREzg+QupUluUjjLoiIq6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QQ游戏王.exe

Files

eb62655ff155ac7aeed15913cf1294d4_JaffaCakes118
.rar
QQ游戏王.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 467KB - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 1.4MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url