ffd81cd5c26fbaf8fcddeaa5e35261e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffd81cd5c26fbaf8fcddeaa5e35261e4_JaffaCakes118
Size

201KB
MD5

ffd81cd5c26fbaf8fcddeaa5e35261e4
SHA1

b8c4efa70ec4a6b250acae95a4405d75275d139d
SHA256

7e77af5c32c86706e19b9e0dcd36ea49036cccb865dfc290008ad679b2437aa5
SHA512

d25bdc32f4a2ded284c59ab2a30707e318aa8cf8bed31d770b8ba50e24ae012937415b2fccccb48abbfbec3b30fa6857e7cadb46b413c7a6bb22885c1b48935b
SSDEEP

3072:XXIEu5WghaIkOSncuE3NzEWHWmNnSRnj+Y+cmfHWAmvIE12ky13r7TDquoNPfO:XYL5ba1NENzMaSp+Yt1AWhy1773qNdm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/92121763.exe

Files

ffd81cd5c26fbaf8fcddeaa5e35261e4_JaffaCakes118
.rar
92121763.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot