5d8531310c18a3834a1b0f278228e61a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d8531310c18a3834a1b0f278228e61a_JaffaCakes118
Size

17KB
MD5

5d8531310c18a3834a1b0f278228e61a
SHA1

81167cb54c38f97db80dbc711949515887cc5df4
SHA256

7ad6f67723dadd7552b99b35a4d605ae331c13cfe1f4888406d554e9df58cea9
SHA512

493f36f0022b111f1e56f781957568734b6d936880e6ec7d6c0c20f8f8a3a03d27f0f37128cc619e8bdf502c4396277a0dc8f945e817baa0cb11bb6d6b0f5d12
SSDEEP

384:19+j/omWtcchkuaAXBlAk1CDCbzJD8bIwb1juD2:4/odcokufx+/DCPJD8TwD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WORD文档保护解除器.exe

Files

5d8531310c18a3834a1b0f278228e61a_JaffaCakes118
.rar
WORD文档保护解除器.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

yC
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jb51.net.txt
去脚本之家看看.url
服务器软件.url
每日特卖_淘宝购物返利.url