44a05a1758883e430de2d402b275e1f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44a05a1758883e430de2d402b275e1f2_JaffaCakes118
Size

643KB
MD5

44a05a1758883e430de2d402b275e1f2
SHA1

2323d0e2a243f434752dfe0af664d7849d1b2330
SHA256

d792cb83d11c4d3b5fae37c409906abfe85ae0238af0be4ad10205b366d3da2c
SHA512

6a91543fe6d07d0fc3de9f330a9321d6ef7bb3777caa33e887a04fc6de0688ee902131e4d55063d025980d5f713fdc9561d0a7daa95a2ac86827e4dea21c8e18
SSDEEP

12288:AHbmCDWcJAEOHOuyQLo0jtccIsvXA0yum8QkqbrsUBl1QgAIrsf6sL:EDDWoOuALVjthvfhubrsUBlWEsf6sL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/SpCC - меняет Prodact Code телефона ! ! !/SpCC/SpCCv3.1.exe

Files

44a05a1758883e430de2d402b275e1f2_JaffaCakes118
.zip
SpCC -  Prodact Code ⥫䮭 ! ! !.rar
.rar
SpCC - меняет Prodact Code телефона ! ! !/SpCC/Lang.ini
SpCC - меняет Prodact Code телефона ! ! !/SpCC/Products.ini
SpCC - меняет Prodact Code телефона ! ! !/SpCC/SpCCv3.1.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 534KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 140KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SpCC - меняет Prodact Code телефона ! ! !/SpCC/ant.ini
SpCC - меняет Prodact Code телефона ! ! !/SpCC/ant_st.ini
SpCC - меняет Prodact Code телефона ! ! !/SpCC/settings.ini
ᠭ.rar
.rar
Описание/SpCCj.jpg
.jpg
Описание/Описание.doc
.doc windows office2003