939538320ff69e961f767d411cc652df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

939538320ff69e961f767d411cc652df_JaffaCakes118
Size

172KB
MD5

939538320ff69e961f767d411cc652df
SHA1

67adf39c2ca15ae4e7e0af911d60bdf318711cb6
SHA256

f1d8dda60a7b79fd7766ce65034915f2367546e379f1ec97d7f8b6e16ed17c1c
SHA512

c1831cb3f21498ff4d96f6bfead7d68ed70819e2aa86d2bdb890d6c0c5110ab09833f56b8a2c49dcdbc0fc503f5c3428b60ad18641ec45e2eff7f1a103456089
SSDEEP

3072:8Be3MY4vx2LIh46E54E62OUuOE3hSsv7vIkcHNOE2lgTRb7ACWrrosKWyQtuub:8gP4vsLB4EhTDK5IXHNOre7+rkGywBb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LightAnswerdtzddt/LightAnswer.exe

Files

939538320ff69e961f767d411cc652df_JaffaCakes118
.rar
LightAnswerdtzddt/LightAnswer.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 83KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LightAnswerdtzddt/更多软件下载.url
LightAnswerdtzddt/飘荡软件.url
.url