2ea710ec3e4ca8d81245a7107e980ddd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ea710ec3e4ca8d81245a7107e980ddd_JaffaCakes118
Size

347KB
MD5

2ea710ec3e4ca8d81245a7107e980ddd
SHA1

e723d71468a40429d51cc87f0d0637a58792baa3
SHA256

fc31e1aeeec3ebd1cb13d7bf5a2fd03bbc5f2fe3b1e8232dd7ee95fbf57ac5c2
SHA512

ab9c5e073cbc29deac46c3e6756e10818150b40e7b41adb4d8f093cd05cc4d171b04446ff24eccc2202f32ff387666a61915b3ecd8b7074a98516c3f38a7fd5e
SSDEEP

6144:EWJZQFGDMsyzmHUpAqOfd9Ba0tzxpoV9UeunuRmtfOzD23Pz6HbL/UZ:Es6syzsb9fU0tnoVQnPBOuPzAf/K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/福利qq空间秒赞秒评论 v1.2/QQ空间秒赞秒评论工具1.0.exe

Files

2ea710ec3e4ca8d81245a7107e980ddd_JaffaCakes118
.rar
福利qq空间秒赞秒评论 v1.2/QQ空间秒赞秒评论工具1.0.exe
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
软件E线下载.url
软件资讯教程.url