f5304d8f6e20313844f9c2a81e755c1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5304d8f6e20313844f9c2a81e755c1e_JaffaCakes118
Size

4.7MB
MD5

f5304d8f6e20313844f9c2a81e755c1e
SHA1

ae22d3e4e66c8c1a4991c017d6503e487ce7d9e6
SHA256

046f5d6ef496d78e0510fad25dcc5529b7900152b8040d38108063326558f591
SHA512

68073ca3b4662b6a793059cd6958cceb58daf0b5a34f1261be4cf2fe4e9cc5808558719ca71dcbdf64c90e4e5e927026426f7f6cfe6948a75ee5a6cac1b95f6b
SSDEEP

98304:79kBxzDy4wbdewQVEdjL0+Dsq1VGJCnDHQIpDqQaOT7q3rlStAk:hmV9wDASjLgqGaq3aq3QtAk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ha_Audio2SWF-v1.0.0.8/HA_Audio2SWF1008_CZ.EXE

Files

f5304d8f6e20313844f9c2a81e755c1e_JaffaCakes118
.rar
ha_Audio2SWF-v1.0.0.8/HA_Audio2SWF1008_CZ.EXE
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

S2C!
Size: - Virtual size: 640KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Fox!
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2008
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ha_Audio2SWF-v1.0.0.8/新云软件.url
.url
ha_Audio2SWF-v1.0.0.8/汉化说明.txt