6046296a8e4fbc18741619a3b62a21bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6046296a8e4fbc18741619a3b62a21bc_JaffaCakes118
Size

1.6MB
MD5

6046296a8e4fbc18741619a3b62a21bc
SHA1

cbf66a750ddf6e90c675f786790de9bae25a2f78
SHA256

e5228ea37eda2243292b1335d9293a77b4987fe5541180df2890a47230aa82f7
SHA512

a6f5487b6cba9398424ca9c8f022451dc374b59becadb1cf31b7b1ca7ec80e0fe24cdd9aa8adcd020f0fac1244bfcdfd6b9df47488fa12cfd8185fa55eb62a10
SSDEEP

24576:6co5CYwK0sVRLSAhjOm92edRnQSweKtnU1rZhtblr32vU7t3ztpLms0ALgO:6cSCn9sVZnVLnnnGUhZV8U7lrmkj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/大天使之剑夜涩辅助V4.1/大天使之剑夜涩辅助V4.1.exe

Files

6046296a8e4fbc18741619a3b62a21bc_JaffaCakes118
.rar
大天使之剑夜涩辅助V4.1/夜涩辅助辅助界面.jpg
.jpg
大天使之剑夜涩辅助V4.1/大天使之剑夜涩辅助V4.1.exe
.exe windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 640KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 992KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jtvigdgs
Size: 824KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pujywvld
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
大天使之剑夜涩辅助V4.1/更新内容.txt
小林子下载站.url