382f51dc2ebaa3ff2c1a1419b09af8a4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
382f51dc2ebaa3ff2c1a1419b09af8a4_JaffaCakes118
Size 337KB
Sample240512-ervd1aba87
SHA256 5e08db7dc8690f57683c5b57435b1b55323531bdcaffde41a392843d826792bd
MD5 382f51dc2ebaa3ff2c1a1419b09af8a4
SHA1 2b156573594c98871a2143cf9a5d1ceef9987ea3
SHA512 781701ad63e4c364cd01eb06643024ab21c5f943e984b8d9a6410d236b3a9e457d4c672744274d24fc3c8703cdfe2d747f62a81b4d9ed5142a1a735a3208ed08
SSDEEP 6144:WxR990qKZwmbvdqwZ0e1081wnSYjrpubsjbot/p6O5RW3nCE2NSao:WzKZw4lZ0X8kSYjUw3oVf5RSnC5Ny
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/物理高二课件光/物理课件softii.exe

File Explorer

382f51dc2ebaa3ff2c1a1419b09af8a4_JaffaCakes118

.rar 337KB
物理高二课件光/物理课件softii.exe

.exe 593KB

382f51dc2ebaa3ff2c1a1419b09af8a4_JaffaCakes118

SHA256 5e08db7dc8690f57683c5b57435b1b55323531bdcaffde41a392843d826792bd
MD5 382f51dc2ebaa3ff2c1a1419b09af8a4
SHA1 2b156573594c98871a2143cf9a5d1ceef9987ea3
SHA512 781701ad63e4c364cd01eb06643024ab21c5f943e984b8d9a6410d236b3a9e457d4c672744274d24fc3c8703cdfe2d747f62a81b4d9ed5142a1a735a3208ed08
SSDEEP 6144:WxR990qKZwmbvdqwZ0e1081wnSYjrpubsjbot/p6O5RW3nCE2NSao:WzKZw4lZ0X8kSYjUw3oVf5RSnC5Ny
MD5 SHA1 SHA512 SSDEEP

物理高二课件光/物理课件softii.exe

SHA256 a58fa1739b7390aa7a2ad1347fcea32ae4d46dbc28c60d080cc62e9e05d27d62
MD5 755c97305378d9c43ce20f7839dbea50
SHA1 f0706e229bb596f729b716c6cbecbea8165b7aad
SHA512 b33a3a92b76e72ce9415206cc11e5398ff293bdbd7834abe079bade8141ba49b21ca5e59cb967f0196f0af3c54913a84fab4b35a562005b72ef908acb5176dd6
SSDEEP 12288:WCpY7sxIOe7EGvLhRDHHCKN6E8/ErnOtk6:DOsxWEGvLvDnCKN6E8UOt
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

68750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

528B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

52KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

382f51dc2ebaa3ff2c1a1419b09af8a4_JaffaCakes118

物理高二课件光/物理课件softii.exe

generic