6423f09618bfc24faab7c9b1fcdfcf1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6423f09618bfc24faab7c9b1fcdfcf1c_JaffaCakes118
Size

1.1MB
MD5

6423f09618bfc24faab7c9b1fcdfcf1c
SHA1

cc5e5f81ee581a799010a6c5b577aaecd892caa5
SHA256

03c98b2003213343786ed3dee32991e5a4fa0d8eeb42388f1c93d0f64437f8f2
SHA512

fefc528b646ceecf35a07a94758e9e461a26d4232fded26aa84ca5e83d3a3989d2a2b6f01dc59f184b90c3f8b0ce997efa73313e049e1501a8fbbb1c43387d38
SSDEEP

24576:/KXqcery6zzQViOFo7+0ZvOC9mJ1u2EObMCkpCwYp1xd:/KXqcerVzCiOTcOamJ18ObtkIxd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/奥奇传说神魔辅助(神魔奥奇传说辅助)_Jisuxz.com.exe

Files

6423f09618bfc24faab7c9b1fcdfcf1c_JaffaCakes118
.rar
使用说明.url
奥奇传说神魔辅助(神魔奥奇传说辅助)_Jisuxz.com.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Esp0
Size: - Virtual size: 648KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Esp1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Esp
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
极速软件下载.url