0070c9fe9f64edbd6b27ba66bc2bddd5_JaffaCakes118 | Triage

Sharing

General

Target

0070c9fe9f64edbd6b27ba66bc2bddd5_JaffaCakes118
Size

1.0MB
MD5

0070c9fe9f64edbd6b27ba66bc2bddd5
SHA1

a5b2c4160e12a417b97c8c95bc2dbbbbf767eb82
SHA256

6a2e1e6c8bbe53f0df0dc6fca22cdaa6e30188df3de9907d1da12e05b3655d5d
SHA512

82bb2b22b65511238b9cd3973000e281ad3bbcddf08c26204bbbc9c47aaf93a96e5cf3a731c85feeeb768e489c1bc1093dece186b9a478e969ebb8aeec4ff9c6
SSDEEP

24576:/CMl1jtH5seZF2kv39hVcWnhYYyQwbhRDMsAz2iyhTJN621B/:qMl1hPFhVcWnGYyQwIsAKicT+Sd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/[]ɳ˲.exe

Files

0070c9fe9f64edbd6b27ba66bc2bddd5_JaffaCakes118
.zip
夏熙QQ飞车剧情秒瞬辅助/fcsy323.zip
.zip
[]ɳ˲.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Esp0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Esp1
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Esp
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
˵.txt
夏熙QQ飞车剧情秒瞬辅助/东坡下载说明.txt
夏熙QQ飞车剧情秒瞬辅助/更多软件下载.url
夏熙QQ飞车剧情秒瞬辅助/说明.txt