39d05d8927820b634686442195a2b3ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39d05d8927820b634686442195a2b3ed_JaffaCakes118
Size

315KB
MD5

39d05d8927820b634686442195a2b3ed
SHA1

c33c9b5dc6215eebe12242b16d746ea7497188f0
SHA256

9f7cf83ccdb560c9b7a619ff2d6592f112bd0e15dbb4927cd6474fb78f8d5c80
SHA512

41db4c74b3b7059b7bb19d165cab0cf581004053bb88dc1101f2c3f41625104f3386a5c90e492bd0ef8edeaa8c58ac2ac43cc1ba14a156d86986e51d22c467eb
SSDEEP

6144:MQiMvTMglhfZa3QbVAr7HRMbahFBFAsa8t28uIxHvzeKnODWUEmLToPfPVed:rnggbSPHRMbafBFAsaY28uUqKhIToq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/图片资源提取.exe

Files

39d05d8927820b634686442195a2b3ed_JaffaCakes118
.rar
使用说明.url
图片资源提取.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Esp0
Size: - Virtual size: 496KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Esp1
Size: 310KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Esp
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
极速软件下载.url
.url