2cded929ea084e3e3c4e552a93980eff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cded929ea084e3e3c4e552a93980eff_JaffaCakes118
Size

13KB
MD5

2cded929ea084e3e3c4e552a93980eff
SHA1

b3b566a9cb6c2e1152a66e8ae20b8f970173b10d
SHA256

e74258473c3f32887c07d2d6862b6101e4b0f5cbcb8ef1ffab31ab0837bc0b8f
SHA512

d0e39497a59d9837679b3bb8e486feb8f9fe4d33062c118c9989076239deaca1686b171e8102947173e4c4cf06c9ec3b03d927e129da17961690eadd03b0a799
SSDEEP

192:j+/71hiCxyQhCeHMjcGqQGd9PFF9SgjeXe1vzkx4w+uEAC7B56TmFEYgbARxVSz8:j+/7aAkbgGqQOFiXe1bQiDFf5gbARvAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WtfEdit文件加密器.exe

Files

2cded929ea084e3e3c4e552a93980eff_JaffaCakes118
.rar
Readme.txt
WtfEdit文件加密器.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

nsp0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nsp1
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
无忧社区_bbs-传奇奇迹天堂魔兽尽收无忧网络私服技术私服版本私服工具私服下载无忧传奇无忧网络 - powered by 5uwl.net.url
.url
无忧私服技术共享区.url
.url
私服免费宣传5u37.net.url
.url
绿化注册.reg
说明必看.txt