fd96da5ff59649d5598bf9f870235630_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd96da5ff59649d5598bf9f870235630_JaffaCakes118
Size

925KB
MD5

fd96da5ff59649d5598bf9f870235630
SHA1

03b2618401055de078d384665a042b12f2c25e16
SHA256

e9bb7e10604f91cc008ccf7836d910f7468bdd1618a5c802e8e2fb5e230dd83b
SHA512

f31819f9de04eb4829c7345dd5fc386788b580200b77d26e887461393a1f39f9fcde1633efacc88a13c0055366432ac03b97b8b63af234c8a7abb57b21d73dff
SSDEEP

12288:NyqANuUw2iOVz6hREUdLZyhUWYHIyXndO1/FcGSwBi0fkHuldX7VrZPQOK53iUHD:srEUw2Uo6LpfXndI9cKg8dLFV65yUSYV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DNF多键连发V1.1.exe

Files

fd96da5ff59649d5598bf9f870235630_JaffaCakes118
.rar
DNF多键连发V1.1.exe
.exe windows:5 windows x86 arch:x86

fcbdd7142ab3b2504747b6257cb7b08a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm kernel32

waveOutUnprepareHeader �

Sections

.text
Size: 428KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 752KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url