8109fe22b584248c396f6a2cea3baf50_JaffaCakes118 | Triage

Sharing

General

Target

8109fe22b584248c396f6a2cea3baf50_JaffaCakes118
Size

1.6MB
MD5

8109fe22b584248c396f6a2cea3baf50
SHA1

13b1e2af45b7be21cee79b58a03a0c4399995178
SHA256

450d7f97f23c00301ac334c05f296fe304b4bdb02cd72e4a98391e691c7b35f6
SHA512

5e9a1dcd94a228ef779f8748313e142967c678cea611246a5cf8a849fe9f2b33370fafbea7dd954f3875045848836286c6926c2c10c0c54f35286e3f4d556b53
SSDEEP

24576:k00XOSvEJd8eEDPq6tP/1w9D8AB+Pcx4+ElgICVOpGForZx1D:k0ov4d8eEDPnJ1sYAB+Pcxmgo1xh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9gpan.exe

Files

8109fe22b584248c396f6a2cea3baf50_JaffaCakes118
.rar
9gpan.exe
.exe windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 456KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

boboukwp
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

heapmeek
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
多多软件站-提供绿色软件和热门单机游戏下载.url
安装必看.txt
必看介绍(先解压，再使用软件否则无法打开).txt
软件说明.url