f14202d14783891b5cf187d291beee1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f14202d14783891b5cf187d291beee1b_JaffaCakes118
Size

611KB
MD5

f14202d14783891b5cf187d291beee1b
SHA1

72f67e6af40860e1f22f5ee5dc7a0d19382c8a9f
SHA256

818defbc7063b26f1ebe862669c2bab12b6c958eddac69c61a2d6c41c92aa7c5
SHA512

8d0ed3ad1401071065a94eb9584de595c9ebd24501eab2a094a71d1edf9df6f2abfd153f30e22d4927c924a58a2f7f1c29e89e8c4a523cb8015ee17536641e7d
SSDEEP

12288:dHscGuN+w0FhpeTVjvPIaWXCh9RKJx2em461vxWaUfD3bIvPpqtkeEh:d3XNC0VDP/WX0R6xXwpW7DmpQke0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mssql Server 数据库自动备份精灵.exe

Files

f14202d14783891b5cf187d291beee1b_JaffaCakes118
.rar
Mssql Server 数据库自动备份精灵.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url