41590de7fead21a6af8ecb67ab353e8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41590de7fead21a6af8ecb67ab353e8d_JaffaCakes118
Size

1.2MB
MD5

41590de7fead21a6af8ecb67ab353e8d
SHA1

612fef686670bd580ff09a08eacff80c8d5445cc
SHA256

2b5a148f464245a553769dfde713c9d9c4e94e5a45e2b714ba245a875d54f0b8
SHA512

1ad788d6fccf7affd6a41c7c7921fc0dd4082dce9131658f325899a718137fe35f2a30b87f35f3c0ba2c099bd57c6e3b60b0303281b7e20177d2e5f6f9fb63e3
SSDEEP

24576:kTCsqe0pEnrZBwwg6yelBWLf/laJLjZANG05LmeRfdgBaLFMsUnHcQU74RjtA8mN:kTrvwkyery3u94HLm+maJbUdUkuN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/wrar38b4sc_FIX.exe

Files

41590de7fead21a6af8ecb67ab353e8d_JaffaCakes118
.rar
wrar38b4sc_FIX.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
使用说明-使用前必读.html
.html
素材来自中国学网 Www.Xue163.Com.txt