08744f6189dbb31b39b78a4abac8b623_JaffaCakes118 | Triage

Sharing

General

Target

08744f6189dbb31b39b78a4abac8b623_JaffaCakes118
Size

385KB
MD5

08744f6189dbb31b39b78a4abac8b623
SHA1

602509d94585e0fac1bdf313acfe534f97152c3b
SHA256

f9b7a97a41b979f67736fd0229c5c0232f40013be888c1eea1ff33f66405708a
SHA512

dbfd9809539f7d4024c1f90eac8d8aab60848482771b19e298299a919cb72744240e2c25aefca5c8463f7bf02c31ea61897ac6d70c76a2b894c435b6f9a6502b
SSDEEP

6144:eWY0VuNmDgTjyijnggBVksPUR+TdjIKGd2n455ztdNO6f8dxo+n+xsLtR/1S3eh:eWY0VusD0RJLE+RjPGdFtU+xsphE3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/植物大战僵尸online小悠辅助 v1.2/植物大战僵尸online小悠辅助v1.2.exe

Files

08744f6189dbb31b39b78a4abac8b623_JaffaCakes118
.rar
植物大战僵尸online小悠辅助 v1.2/更多软件下载.url
植物大战僵尸online小悠辅助 v1.2/植物大战僵尸online小悠辅助v1.2.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Esp0
Size: - Virtual size: 596KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Esp1
Size: 366KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Esp
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
植物大战僵尸online小悠辅助 v1.2/飘荡软件.url
.url